last executing test programs: 2.48974011s ago: executing program 1 (id=7887): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="71050910020106072f2f05112f06000000e904f4feadc76a"], 0x3f) 2.356331878s ago: executing program 1 (id=7890): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r1, 0x800448d2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300070000000800090001"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) (async) ioctl$sock_bt_hci(r1, 0x800448d2, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300070000000800090001"], 0x44}}, 0x0) (async) 2.165412595s ago: executing program 3 (id=7894): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) r1 = socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'netpci0\x00', 0x1000}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xffbf}], 0x1) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0xc, 0xb, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) 1.95812736s ago: executing program 1 (id=7895): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002c0007012bbd700000000000097c00000c00018006000600843b000004000280f324b46d78874ec62c8d7e17c3ce23ffd6fd61f98133c2d7ee5f681b91d7072f603303"], 0x24}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c", 0xf}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "a0fcc73b5ef32a884b2033728e956f3f20d16734af14637c", "85eff9728117c4c62162a8a6a5340ad7eccbe4a1c68802028d6ef0a4df21f4a9"}}}}}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="600602"], 0x8) r6 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x1, 0x71, 0x10, 0x23}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d}, 0x94) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0xfff, 0x0, 0x0, 0xffffffff}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0xc, 0x7, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x88, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x10, 0xc}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x6, 0x9, 0xc, 0xf, 0x1, 0xa, 0xf, 0x1, 0x11, 0x9, 0x3, 0xb, 0x8, 0x5, 0x0, 0xa], 0x1, [0x4, 0x8, 0x81, 0x5, 0x9, 0x40, 0x4, 0xf, 0x8000, 0x6, 0x3, 0x7, 0x0, 0x5, 0x9, 0x8], [0x2, 0x6e0, 0x3, 0xf, 0x8001, 0x6, 0xeaa, 0x8, 0x3, 0x2, 0x1, 0x200, 0x3, 0x4, 0xfff9, 0x80]}}}}]}, 0x88}}, 0x80) 1.795457065s ago: executing program 3 (id=7898): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r2, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 32) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) (rerun: 32) 1.608852846s ago: executing program 3 (id=7900): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="71050910020106072f2f05112f06000000e904f4feadc76a"], 0x3f) 1.522084513s ago: executing program 4 (id=7904): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = socket$kcm(0x10, 0x7, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) 1.438108644s ago: executing program 4 (id=7907): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001300)={0x3c, r1, 0xd1b, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x800) (async) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001300)={0x3c, r1, 0xd1b, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00'}, 0x94) 960.427599ms ago: executing program 4 (id=7911): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 958.764517ms ago: executing program 3 (id=7912): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c000000420007012bbd700000000000017c0000400000000c0001e55b58be809438f2c2d8d69e4e64b2fbcb6fce6feecbdf7a4a28f4763651ad2eb9ae044fcc125585c826cec476deab89701f12517e4379a681ea1fd490be9bf47af80a027701b62d42f557c7e69cb71b2dc3893f3b5d6fe2ade96e64f5405b98a4ebaa66e96daf388a"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r2, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r0, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') 958.190583ms ago: executing program 1 (id=7913): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x20008000) (async) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x20008000) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000001c0)={r0, &(0x7f0000000040)='\x00', 0x103002, &(0x7f0000000080)={@align=0x3, {0xb59d, 0xf, 0x4, 0x7f}}, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x7f6}) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000001c0)={r0, &(0x7f0000000040)='\x00', 0x103002, &(0x7f0000000080)={@align=0x3, {0xb59d, 0xf, 0x4, 0x7f}}, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x7f6}) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000380)={{0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, {0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x101}, 0xffffffffffffffff, {[0x2, 0x3, 0xd2a8, 0x6, 0x9, 0x3, 0xffffffc0, 0x8]}}, 0x5c) (async) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000380)={{0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, {0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x101}, 0xffffffffffffffff, {[0x2, 0x3, 0xd2a8, 0x6, 0x9, 0x3, 0xffffffc0, 0x8]}}, 0x5c) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x3, 0x20}, &(0x7f0000000240)=0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000280)=@sack_info={r2, 0x4, 0xf8c}, &(0x7f00000002c0)=0xc) 957.896567ms ago: executing program 2 (id=7914): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETUID(r0, 0x891a, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x4001, 0x3, 0x1e8, 0x0, 0xb, 0x148, 0xb8, 0x148, 0x150, 0x230, 0x242, 0x150, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73, 0x0, 0x58}, 0x0, 0x70, 0xb8, 0x0, {0xff0f000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x999, 0x1, 0x6, 'snmp_trap\x00', {0x5}}}}, {{@uncond, 0xec010000, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x80000001}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x80, 0x1, 0x0, 0xfffffffe}, {0x6, 0x0, 0x10}]}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES16], 0x6c}}, 0x0) 795.005352ms ago: executing program 4 (id=7916): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'batadv0\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}}, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010067656e65766530"], 0x110}}, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x2, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x30, 0x2e, 0x61]}}, 0x0, 0x29, 0x0, 0x1, 0x43}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000180)={0x2c, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x2c}}, 0x0) write$tun(r0, &(0x7f0000001a00)={@void, @val={0x7, 0x0, 0x0, 0x0, 0x1}, @x25={0x1, 0x2, 0x1f, "d17959a5c55bc752b9864c4568d1b4887dff1a8264c6dabb6ca814f0c577853f"}}, 0x2d) 776.501419ms ago: executing program 0 (id=7917): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4(r0, 0x0, 0x0, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0xab}}, 0x0) 754.232784ms ago: executing program 2 (id=7918): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={{r0}, 0x2, 0x80000001, 0x9}) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x4, 0xab, 0x3, 0x8, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xaf, 0x7800, 0x8, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x700, 0x7, 0x2, 0xbc06, {{0x32, 0x4, 0x1, 0x4, 0xc8, 0x67, 0x0, 0xc3, 0x29, 0x0, @rand_addr=0x64010100, @multicast2, {[@ssrr={0x89, 0x17, 0x68, [@loopback, @empty, @multicast2, @local, @loopback]}, @ssrr={0x89, 0x1f, 0x1, [@dev={0xac, 0x14, 0x14, 0x14}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x11}]}, @timestamp_addr={0x44, 0x1c, 0xb2, 0x1, 0xd, [{@rand_addr=0x64010102, 0x2}, {@loopback, 0x7}, {@loopback, 0x5554}]}, @timestamp={0x44, 0x1c, 0xb8, 0x0, 0xf, [0x7f, 0x5, 0x6, 0xd1, 0x81, 0x7]}, @lsrr={0x83, 0x17, 0xb3, [@local, @multicast1, @local, @local, @multicast2]}, @cipso={0x86, 0x2f, 0x1, [{0x3, 0x3, '\r'}, {0x2, 0x11, "904d4255fa45829167322a825d0157"}, {0x2, 0x11, "ed379e199b5f4e9c0f4cfdea9b9bdd"}, {0x7, 0x4, 'Nk'}]}]}}}}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x0, 0x1d, &(0x7f0000000480)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x68, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'gretap0\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x20, 0x0, 0x5, 0x1000, {{0xb, 0x4, 0x0, 0xd, 0x2c, 0x68, 0x0, 0x7, 0x2b, 0x0, @rand_addr=0x64010101, @broadcast, {[@rr={0x7, 0xf, 0x22, [@empty, @multicast2, @local]}, @lsrr={0x83, 0x7, 0x18, [@empty]}]}}}}}) (async, rerun: 64) getpeername$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000800)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000840)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0], 0x0, 0x5c, &(0x7f0000000900)=[{}, {}], 0x10, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x51, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000dc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000b40)={0x228, r2, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x228}}, 0x10000000) (async) r14 = accept(r0, 0x0, &(0x7f0000000e00)) ioctl$sock_inet6_SIOCADDRT(r14, 0x890b, &(0x7f0000000e40)={@remote, @empty, @loopback, 0x9, 0x367, 0x6, 0x500, 0x3792c0ff, 0x0, r13}) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r1) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000f40)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, r15, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r16}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4041) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r14, 0x89f0, &(0x7f0000001100)={'gre0\x00', &(0x7f0000001040)={'tunl0\x00', r13, 0x7800, 0x8000, 0x6, 0xfffffffb, {{0x21, 0x4, 0x1, 0x8, 0x84, 0x67, 0x0, 0x4, 0x29, 0x0, @multicast2, @broadcast, {[@noop, @rr={0x7, 0x1f, 0xca, [@local, @private=0xa010101, @broadcast, @private=0xa010101, @multicast1, @private=0xa010102, @rand_addr=0x64010100]}, @end, @timestamp_prespec={0x44, 0x14, 0x46, 0x3, 0xa, [{@multicast1, 0x4}, {@remote, 0x3}]}, @lsrr={0x83, 0x7, 0x42, [@dev={0xac, 0x14, 0x14, 0x21}]}, @lsrr={0x83, 0x17, 0x13, [@local, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x1c, 0xc7, 0x1, 0x9, [{@multicast1, 0x4}, {@loopback, 0x5}, {@empty, 0x80}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001180)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x4c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000) getsockopt$PNPIPE_HANDLE(r14, 0x113, 0x3, &(0x7f00000012c0), &(0x7f0000001300)=0x4) (async) bind$bt_hci(r14, &(0x7f0000001340)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) setsockopt$inet6_tcp_int(r14, 0x6, 0x7, &(0x7f0000001380)=0x8000, 0x4) (async) socket$kcm(0x29, 0x7, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000001440)=@buf={0x80, &(0x7f00000013c0)="cd432e1216f2872b12aa31a372599c28a47ba75216bc1f3f5bad211f54aa9370fee5b6e45e6493c2b21dda96157d933706b2bf9064a50bdbf84ba1c4aa23b7b8b4d326b99cd618a94c9c407366c033e3a37c89e15b2d09674dec3737b01ed400bb5cfdbd74c6207e95cf33fc1bb0eaeee5c0784202c31de932d8759a5e88406d"}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001480)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) 592.669035ms ago: executing program 2 (id=7919): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000007480)=[{{&(0x7f00000027c0)={0xa, 0x4e20, 0xffff, @mcast2, 0xc}, 0x1c, 0x0}}], 0x1, 0x20000000) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x0, 0x2) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4050000000000007110880000000000460000000000000095000000004a000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x12, 0x2, 0x1, 0x104}}) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) sendto$inet6(r0, &(0x7f0000000500)="fcfa33db93b6b3e7348d4ad3d1d9387d64a688c1ec21f4f24ae4edd9530ce01b069c149ad0b11b84fba3493ffbef640fd2f68a8a8147bcf992c0aaf10c498962f408ec777869c3f13647d3c2ddff43af6c84caaac1a1fbdb79ece94b5eeeeb7e05fa0b6efe08db07560b9932393a09dfd765b4c31b594990c3830012c7cbfd7dcdaeca5bf9b6e9fd4fd5aa3b4d016a894473160a89642f7a7593a8fe24203b4ec42bdb01d0fc0d7fb1222708b291158a43800f4d22aeed500ae22fab9de0aaaff72aec39a89773740db230bfa2", 0xcd, 0xc001, 0x0, 0x0) (async, rerun: 32) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x24000080) getsockopt$bt_hci(r7, 0x84, 0x81, 0x0, &(0x7f0000001200)) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=r11, @ANYBLOB="ebffffffffffffff280012800b00010065727370616e0000180002800400120005001600010000000800150000000076"], 0x48}}, 0x0) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r12, &(0x7f0000000440)="a6c22c9ce8ce1c208bc16608bca180ef7827ef09cae99a52534607135f2320534bc14a83d5d2027bdc693b85429cec986e6537f9fdd4923ff1e4dd5ebddfe2343eead17a56838c8015d61f4c22d206573b98016dae67f57391b3405c2444b37a820f7d12b11862d3b5fa231c96c617d7cc768f5757a6b95f6e30b1888fab53ae426d16f460cbbf76186e5b7a3c7564414d", 0x91, 0x4004040, 0x0, 0x0) (async) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000d00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000840)={0x45c, 0x12, 0x200, 0x70bd2c, 0x25dfdbfe, {0x2, 0x4, 0x6, 0x51, {0x4e23, 0x4e23, [0xe, 0x9, 0x1, 0xe], [0x0, 0x3, 0xe, 0x6e], r11, [0x0, 0xfffffffd]}, 0x63, 0xc}, [@INET_DIAG_REQ_BYTECODE={0xa9, 0x1, "e1ea73d030612131b13d4a79c216bf415875f42953253d6548a14d078ecffe50e0e262388ed5acb8beccbfeabe14fe8fd9939014504d32cfae1258053c44e9c1082ca882a02a764dbebb810b72f6a616667f34cb1c34781fa92aac498d4e7430c62b6c58d2e7ad1784829694f375e8ff7a59968dcd43c5df0ae53050c26b88ae39a36e11238b45cc8091be9a9246067240362a4d7b50a4a92432c48fbc56b8dee792b5018e"}, @INET_DIAG_REQ_BYTECODE={0xbf, 0x1, "cf83e24caea72b6a4fb54e3ead4cd8577051d16ed151a816557caaad3a633b37e33281f0d0087776359a50f721affa0e0c87f2cf8e5c17063d76ebbf36a1af46432b9f867fd64c24885eab4ef913dea98d03f3a9486c2deccc300d8e7a77e71f191265d071073bdea2b75125b3e8d34b233d93ffc6ab6dd59d361955dad32ddf9b3504575da20a1a60e7ab9670f606a5d1f7c3255cabf975901cd09a5613737e3ab149f21bb23281667c71d6f7767abc37957a47bafa0812ef4f8b"}, @INET_DIAG_REQ_BYTECODE={0xe5, 0x1, "039e288168ef2105da84bfa8730f0f7ed1cc82d1d68bd7cd9bd56c692de33b7c8410154e6bd0626abd45927f1278b29baa75c24913bb5a4f2003b84146c139fe19a0e1dbcf1f6fdf03e5690c128b1783cb9757cfaeff9cf150951c5de1e72c2b79032ee57a04cd96b8a64f920e9c48609ee4642c9043316588558b309651940d860a7307883769e2d0b8b29c64c5e7c56c784fc911947f690fc3a2dedc9d831869888e2bef9e5a41e4722c96c8c609ede8a613e0b5e8d250742fcd8c05f8300031a50cff066bf851ae2f810246a3a218c4ceb854c4b29ffc56ff21a0bae5ddb9b0"}, @INET_DIAG_REQ_BYTECODE={0xc6, 0x1, "fdd5ba96a233ef2b64ad96efd4052602b2c89ea38834c1f37f4d55bba030ef3266158df0257b31af82b001ef0963ca28b0db873c7e7533f9cd92cf5c5c64669f281acea41b7c86e977c16ed11d7a145202953493503a93832591518c29c8488676839923626bf30bc74c8dd0a7073c7741c6b0fced8fa81f0af8b497d129448d6935157426431138ee9602b26888e816f022fe73d024cd36daa7a457a563ba91acb52cffb0635be150633fe85a993e39f8fc70246fe420956ba7b827f7f57ce335b8"}, @INET_DIAG_REQ_BYTECODE={0x11, 0x1, "d4e9d859dfd306f3d7eb92ac90"}, @INET_DIAG_REQ_BYTECODE={0xdd, 0x1, "771c582c1d6ca16c517c871305b7f2003469170da86e3c6d6523b28de7ceb74a4d8fa0e93bfea7a5f8347f6372e0ac5a52fe92568af20b63340e8952093dca7d08f60fe4c9ba03ed518b5c80e431124c1b670d058d697f6b67c4535bcce587085f91137e2b0f5c71f732851a04f190b82b0855daf6bcf8b524b78efbc19ac1b4898450fc7acf736b2b0acbf7cb199fd90b8632db38d6026073070b5fd40f65740f3897284252c6865970fc9e27f1d77b856d5c0012283fa17fa20a7e8ebdffab501d38eb53d336b47d8649d769e14f6aee6b60bd09b1b06e6d"}]}, 0x45c}, 0x1, 0x0, 0x0, 0x404c841}, 0x20004000) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1440a998f500010000000000310000000522080add5d4474c5de672b691e000a"], 0x28}, 0x1, 0x0, 0x0, 0x4004081}, 0x20008804) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1a4}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 592.269484ms ago: executing program 0 (id=7920): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000f14010029bd7000fbdbdf2509004500756d6164000000000800030002000000120c132a20677133e6007814b29e133b10596b3b96a26f7665146c4950a17d300f0ce40d4cc0a2b2280ad99f306aeb834e557fdb70ee13a370a97dabb28610c081452120526aeccfa7631e0a005dae691e58b857288106e8ba281a5108101523eac5904be509db3433c31fc32fb951bf83e91dddf1a835ddb35ade8c5a31e1f96bdb0324f82ea431b7f00452089745aea58062010149f7b1d02a4090b164fa3718079258db8d6568564e5daa835744ae60a5df64a5be96395db3c72987037768c83d63b66ae35dad16927618f97b3d4f"], 0x24}, 0x1, 0x0, 0x0, 0x8d0}, 0x40810) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="000000eaffffe8aaa26a8b8b8e3f8ffaffffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0240000001"], 0x48) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0xc}, {0x2, 0x0, 0x0, 0xffff}]}, 0x55) r2 = socket$unix(0x1, 0x5, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180017000000050017"], 0x50}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000eb3800000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r7, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x3d}, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) 590.937037ms ago: executing program 1 (id=7921): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000100)={&(0x7f0000000040)="56f6edab8b163c0e8ea02cab55ee46e386d1a2fbf18b5b2d5d372b3a046850ad93a35baee1272b377a64beba13ab33c9dd83a7a00b2c6810478a4123352d4ac23ed2c786bd75cc1cf74e29080f0ada6061b19b1ddabd4a889213b3340855e15dc5746077b635cb48656044add138c6455466c4c1a94a7eb24c22bf89046365b8d2d4bcf5efe521ab045251404b318a35bb1caedfeea4d8fec7df627fac637e097719ab", 0xa3}, 0x1, 0x0, 0x0, 0x40044}, 0x20000c1) (async) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000180)={'nat\x00', 0x0, 0x0, 0x0, [0x8000000000000000, 0x3, 0xfb6, 0x8, 0x3, 0xc8b]}, &(0x7f0000000200)=0x78) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000240)={0x7, 'macvlan0\x00', {0x1}, 0xb31}) ioctl$XFS_IOC_BULKSTAT(0xffffffffffffffff, 0x8040587f, &(0x7f0000000700)={{0x5, 0x5, 0x0, 0x800, 0x8}, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}]}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)=0x0) r3 = getuid() sendmsg$nl_generic(r1, &(0x7f0000000cc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c80)={&(0x7f0000000800)={0x47c, 0x3d, 0x200, 0x70bd25, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x137, 0x0, 0x0, @u32=0xfecc}, @nested={0x10, 0x58, 0x0, 0x1, [@typed={0xb, 0x11e, 0x0, 0x0, @str='}]&%--\x00'}]}, @typed={0x8, 0x106, 0x0, 0x0, @fd=r0}, @nested={0x96, 0xec, 0x0, 0x1, [@nested={0x4, 0x32}, @typed={0x8, 0x5a, 0x0, 0x0, @fd}, @nested={0x4, 0x47}, @typed={0x8, 0x2d, 0x0, 0x0, @uid=r2}, @nested={0x4, 0x8a}, @generic="89ccebedfecefca0c5115f1f673f2bf97260fd8c984c9123de13c74ee7e6", @typed={0x4, 0x35}, @nested={0x4, 0xc3}, @generic="8f04627984f3c4443b45f43bf6dec944710987159804df7072fe13e4e3ed737f1f4b31f92389093f4849e35149bcb1a90f1f0055e71d2cb76d10de9f1ae64ee935e29dd87f394b6ffbdf6d2f61976605"]}, @nested={0xf9, 0x28, 0x0, 0x1, [@nested={0x4, 0xde}, @nested={0x4, 0x5}, @generic="672684a955bbdb8ec3ae401bcd3dc91b24435536ab518cfa88fe451058755e64c9831cd8a0ee91bb45fa3a868db87516a303926b5624dbba9fb85fceeaad05d2b62b02e636867dfe7981ceb474738a4393410d1f28a54aa2754036303e7b9440d41aa9e4f3921d8b02a910002e211aaf4b2a0e6159856403bab196c83fcb19787ac497092db5cfaa61f1e67fdb5cd160d1035954c7daeb35afa1ae843c28f7fd397d12ff79db70920c21e3bda01174d0548c636fc2ebaa79af8d83e980da2a15f179679f40a846e078303f3c20224f0b02cbdcf41409d2020659631424", @typed={0x8, 0xf, 0x0, 0x0, @uid=r3}, @typed={0x8, 0x159, 0x0, 0x0, @fd=r0}]}, @generic="384ed6a3e30c16b253f646b71466343d8f2fa934ea78f94c1c7afad5c1cde777d194d2e431fe2f460898c44f667f22745098a7925980de0a997607c664de289d88af30", @nested={0x167, 0x10b, 0x0, 0x1, [@generic="4312fd09800b49a818d6c5f9ddd4fc788b7729f696454c7a046d8afbadcccbf29daf103863088b65f63b4e0396bf2de154c51ca3ccad51351c25a21b68aa6125e7f620e3d8e8f62e86335334a6d811b496a49fe4dfa3bf38512815f6cb351dd711d9fbd8d2371b561d9d9e0c1ce6af4182893992", @typed={0x4, 0x14c}, @generic="7dc2ec1990183a3e5efc0d59620668d3e707e9645ade6ac63f1487dcedd9e6f7827bf73d6afc267d77ed5d4cf621b70556fd31be22e5b2087800eaf8e5c3e361fdcf80aeb4c8f3064e24de18df178851788667e9f6b42ffd490f37994a8a917c7052da3974f204529b8a1419f4a6abf0cb2f8fbc1c8b129105de7150a201f7a4f7935d5f27ec15472d301fa0c0b8c12617e5e1f1ea3c320ba7ca1771b2f5db55a4f062d2547fc9a46ce02f6b55339d8e191d6c52f206282b8306307fbc5b2b7c3ce222f759466a9097ac64f49a64a79c6aa21076e775b4f83a59e146142515d4feb4e568e910751a10692e"]}, @nested={0x8, 0xe, 0x0, 0x1, [@nested={0x4, 0x26}]}, @generic="15dc8745f364f5fac7da934deb94718e0638e8420903b5ed100ffee69ed7f169401b851ae80fbda49893f0c892f660953f6397d6fc84a5a085302747af9c4d52482046ca7016022081201f8cb17fa4e81b58f7e01e397a9c7599a5005f82fe65bae18b07f92d7408943d49d84c0d86043c6762eb9fffd91f184a092b8bd4ba55c954b41533ae17aaf7eeda14748e2053d65cda548a39b10d4292dfb7b3b724aadc3b9cfca2b025225d3db5b238d3a13ef50488c2c4d511a8288f2532b6d12fc6b43236ee36064a08aebea3e889f71edfd4aaa96e75a5ae4fb441680953bc712c83b183d7dc597190d86c3ee116b6db67b8c07967c8060d482f84c63be2aa64"]}, 0x47c}, 0x1, 0x0, 0x0, 0x4880}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)=@ipv6_newnexthop={0x30, 0x68, 0x600, 0x70bd2b, 0x25dfdbfb, {0xa, 0x0, 0x4, 0x0, 0x20}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@mcast2}, @NHA_BLACKHOLE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000f00)={r4, &(0x7f0000000e00)='\x00', 0x400040, &(0x7f0000000e40)={@align=0x6, {0x4, 0x6, 0x4, 0x2}}, 0x1, &(0x7f0000000e80), &(0x7f0000000ec0)}) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r5, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x28, 0x1406, 0x4, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4008840) syz_genetlink_get_family_id$wireguard(&(0x7f0000001040), r1) (async) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001080)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x5, 0x10, 0x4, 0x5, 0x5, 0x8}, {0x6, 0x4b, 0x4, 0x6, 0x1b, 0x8}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000001280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000001500)={'sit0\x00', &(0x7f00000014c0)={@local, @private=0xa010102, 0xb, 0xb}}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000001700)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001580)={0x10c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x101, 0x6c}}}}, [@NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_SEQ={0xf, 0x4, "f5bd7c428fde27e1e4d716"}]}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "76209359f6f215a7e948d5a3d9"}, @NL80211_KEY_SEQ={0xb, 0x4, "6a31a4559398c6"}, @NL80211_KEY_SEQ={0x5, 0x4, 'w'}]}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, "0e"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "8fa6c5ab11461aee1887f9523565c598"}, @NL80211_ATTR_KEY={0x58, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "4e27c9c48b"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "46807af566"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9f70139b8d691f8ab3559597f8"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_SEQ={0x12, 0x4, "a6e3b6fa3349806b925e4cd49a08"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x91}, 0x44000) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000001740)={0x0, @default, @rose={'rose', 0x0}, 0x120, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x81, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f00000017c0)={0x4}, 0x4) (async) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000001800)=""/194, &(0x7f0000001900)=0xc2) (async) setsockopt$sock_int(r4, 0x1, 0x1e, &(0x7f0000001940)=0x77f767b7, 0x4) (async) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e7, &(0x7f0000001980)="2accee703351d4678dd934dc113fcfebd7a4e6cc0cf83fbcf7339d7a57a7cbbba562ff8dc4ebe12dd7f5a49c20") (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001a00), r5) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000001b00)={&(0x7f00000019c0), 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x5c, r6, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x5c}}, 0x4) (async) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r7, 0xc0205866, &(0x7f0000002340)={&(0x7f0000001b40)=0x2, 0x7, &(0x7f0000001b80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000002300)}) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$OCFS2_IOC_UNRESVSP64(r8, 0x4030582b, &(0x7f0000002380)={0x0, 0x1, 0x100000000, 0x0, 0x1, 0x7f}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000023c0)={'batadv_slave_1\x00'}) 445.397166ms ago: executing program 0 (id=7922): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}}], {0x14}}, 0xe8}, 0x1, 0x0, 0x0, 0x480c0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x403, 0x4, 0x25ffdbfe, {0x0, 0x0, 0x0, 0x0, 0x2804}}, 0x20}, 0x1, 0x0, 0x0, 0xc040}, 0x4800) 445.117882ms ago: executing program 4 (id=7923): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="71050910020106072f2f05112f06000000e904f4feadc76a"], 0x3f) 436.068594ms ago: executing program 1 (id=7924): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@newtaction={0x8c, 0x30, 0xeaa3ef926154ef0f, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x14, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_LABELS_MASK={0x14, 0x8, "cc13b55087955abd387040726eb35162"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x82}, @TCA_CT_PARMS={0x18, 0x1, {0xfffffff8, 0x8001, 0x6, 0x3, 0x4}}]}, {0x10, 0x6, "b2503edbdfa654f52ab44504"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x8c}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @private=0xa010100, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@local}, {@loopback}, {@loopback}]}, @cipso={0x86, 0x1e, 0x0, [{0x0, 0x12, "00000000000000963d096612e35232da"}, {0x0, 0x4, "4eb8"}, {0x0, 0x2}]}, @ssrr={0x89, 0x3}]}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000004000000000000000000000000000000100"/104], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket(0x840000000002, 0x3, 0xff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r3, 0x400454cd, 0x337) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000080), &(0x7f00000008c0)=0x4) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x190, 0x194, 0x194, 0x190, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r6, 0x58, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0xffffffffffffff8c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000740)={'tunl0\x00', &(0x7f0000000700)={'erspan0\x00', r7, 0x700, 0x1, 0x2, 0x7, {{0x6, 0x4, 0x3, 0x0, 0x18, 0x68, 0x0, 0x8, 0x2f, 0x0, @private=0xa010100, @loopback, {[@noop]}}}}}) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000940)="974501000000000001008cc5595c4a9b8f52ac8e", 0x14}, {&(0x7f0000000200)="19ba68a749994b7390cb4d93b65f108809", 0x11}], 0x2, &(0x7f0000000780)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x7c}, @rand_addr=0x64010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @loopback, @empty}}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @rand_addr=0x64010100, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x89d2}}], 0x90}, 0x400c854) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1404, 0x800, 0x70bd2c, 0x1, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x20004018) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r12, @ANYBLOB="5a20d7acf75c8ee5570eaf8c3b2490020b0dc4169b44676363fbe4e2c51373ea5da1fb02ec56749846489ad049f8e4d5ad5eae4b842c1564021f799b5030ea305873582d53fabaa8338863ab04cb0721fbb5b0420d79e9e0832cb8b38f94cc4abe1756d23e66c3f795cf6c138d2725515440bcc28e2d8eeae826cfa1040a84"], 0x1c}}, 0x0) 337.298085ms ago: executing program 2 (id=7925): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x32, 0x0, &(0x7f00000001c0)) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x20, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x7}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x114}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r2, &(0x7f0000000400)="cf6479aea92995a2d48efa92c96d7e059e12c91a8709a39c71082d4c5eb0eb31698e57eff0b4224b7df7b2d17ad517fd148820c215ee22957c6928f94702489cf41fabe676a9c868ce5fd1063eee2b94c426e5f15800ac2e9be87ad0092d8a30a62a", &(0x7f0000000480)=""/10}, 0x20) (async) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5202) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x13, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}}, 0x0, 0x4e}, 0x28) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c00048028000180080001006e6174001c00028008000540070000090800014000000000080002"], 0xdc}}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62ea73f72cc9f0ba1f848360000005e14a6cfcc0602000000000e000a0010a190d8cbfa0000000a800000125c94", 0x37}], 0x1}, 0x4000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000001c0)={{r0, &(0x7f0000000000)='.$*($@{&@%\x00', 0x200800, &(0x7f00000000c0)={@align=0x3, {0x9, 0x5, 0xa6, 0x6}}, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x8}, {[0xfb, 0x6, 0xffffff88, 0x3]}, 0x8, 0x0, &(0x7f0000000180)=""/48}) sendmsg$IPCTNL_MSG_CT_GET_STATS(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x1) 317.912647ms ago: executing program 3 (id=7926): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r2, 0x1}, 0x20) sendto$inet(r2, &(0x7f0000000540)="b3e4f6db06ccee6ebb46da199f49478713193331a7d41062af406fe48519096107cc09f2d0ac3fab5b4e9446ee1e4c1784caf0061594ba7832e73c0ff8db6ab6fc54465f4a8781539f84d8ca33d458696c3c42411844c1947e573cc918e8fcecf0545e6f8fedf47a8a7ef731fc61ff82e426c96bb11f351b7e511e15602005c785de83a5ed1430bf7c2dfe", 0x8b, 0x20004801, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x13, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0xbf4e}, {}, {}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0xb}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc16a, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0xd6, &(0x7f00000001c0)=""/214, 0x41000, 0x10, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x3, 0xf, 0x64f7263e, 0x3b}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000340)=[{0x21, 0x5, 0xe}, {0x2, 0x4, 0x9, 0x3}, {0x4, 0x3, 0x9, 0x7}, {0x3, 0x3, 0x5}, {0x2, 0x3, 0x1, 0xa}, {0x3, 0x4, 0x8, 0xb}], 0x10, 0x3}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x0, 0x3, 0x40, 0x8, 0x40, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x700, 0xe, 0x7}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000840), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000880)={[{0x2d, 'cpu'}]}, 0x5) r8 = openat$cgroup_int(r6, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[@ANYBLOB='-'], 0x9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=r3], &(0x7f0000000080)='syzkaller\x00', 0x8001, 0xbf, &(0x7f000000cf3d)=""/191, 0x41100, 0x0, '\x00', r5, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, 0xb881}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x27}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844) sendto$packet(r9, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r11, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x17c, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 280.422321ms ago: executing program 0 (id=7927): syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0x91, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x0, 0x0, @mcast1, @dev}}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, 0x0) preadv(r0, 0x0, 0x29, 0x8, 0x6) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000800000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r2, 0x0, 0x0, 0x0, &(0x7f0000000680), 0x0, 0xcc05000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="190000000203010b0000000000000000000000000800010002000018ebcf6648bf7abffa21ec79870065d5ba39958d4ecdee5f82edcb152fbe", @ANYRES8], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000280)={0x14, 0x1, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4044004}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f0000000080)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0xc, @loopback, 0x400}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754bab1cb61212bb07a2bd205f00f81bef965a071f0d1aadd97b9640d9a0cd9ea71a5e9aec7f03d4406a7710c42cb5e754b089928abcd7589d209bc45b4064028eb7fafaa8b125736e00"}, 0xd8) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x4, 0xfeae) sendto$inet6(r7, &(0x7f0000000840)="a6", 0xfdef, 0x200080c0, &(0x7f0000000000)={0xa, 0x2, 0x8, @loopback, 0x4}, 0x1c) bind$inet6(r6, &(0x7f0000001900)={0xa, 0x0, 0x0, @empty}, 0x1c) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x40}}, 0x40000) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x4, 0x4, 0x3e0, 0xffffffff, 0x0, 0x1f8, 0x1f8, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, [0xffffffff, 0xff000000, 0x0, 0xffffff00], [0xffffff00, 0xff, 0xffffffff, 0xff], 'wlan1\x00', 'erspan0\x00', {}, {0xff}, 0x3b, 0x3, 0x4, 0x5}, 0x2f2, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x2, 0x1, [0x0, 0xe3c1, 0x2, 0x6, 0xfffa, 0x6, 0x3, 0x4, 0x1, 0xfffb, 0x0, 0x9, 0x18, 0xef, 0x5e6d, 0x3], 0x4}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@ipv6={@mcast1, @loopback, [0x0, 0xffffff00, 0xff000000, 0xff], [0x0, 0x0, 0xff000000, 0xffffff00], 'veth1_to_bond\x00', 'wlan0\x00', {0x873054bc4ee3b02d}, {0xff}, 0x89, 0xb8, 0x5, 0x24}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x4}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x1, 0x2}, 0xe25, 0x664}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xe}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x80, 0x3d, "52a7c9017ed5048ad31b0477f146377ff2b6d287373519532f5bff53ee26"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) sendmsg$nl_generic(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x703, 0x270bd24, 0x25dfdbf8, {0xd}}, 0x14}}, 0x4008800) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002100000429bd700000000000023cb8a2cae9893932008a00"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) 152.101094ms ago: executing program 0 (id=7928): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000)={0x20}, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xf8000000}}, 0xa, 0x4}, &(0x7f0000000180)=0x90) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xf8000000}}, 0xa, 0x4}, &(0x7f0000000180)=0x90) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000080), 0x0, &(0x7f00000001c0)=[@dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010101}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0x5, 0x8000, 0xffffffff, 0x40, 0x7, 0xffff, 0x4, r1}}, @init={0x18, 0x84, 0x0, {0x800, 0x0, 0xea, 0xa00}}, @init={0x18, 0x84, 0x0, {0x400, 0x48e2, 0x5c7, 0xbf}}], 0x78, 0x40}, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000002c0)='cgroup.stat\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r3, 0x6, 0x1, 0x89a, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)=r3}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@map=r6, r3, 0x2b, 0x8, 0x0, @void, @value=r3, @void, @void, r5}, 0x20) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, r7, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0c0}, 0x40640c8) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x1e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x24040800) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000800)={@broadcast, @multicast1}, &(0x7f0000000840)=0xc) (async) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000800)={@broadcast, @multicast1, 0x0}, &(0x7f0000000840)=0xc) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000880)={@remote, @empty, 0x0}, &(0x7f00000008c0)=0xc) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000900)={@loopback, 0x0}, &(0x7f0000000940)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000980)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000a40)={'ip_vti0\x00', &(0x7f00000009c0)={'gre0\x00', 0x0, 0x8, 0x80, 0x1, 0x80000000, {{0xb, 0x4, 0x1, 0x4, 0x2c, 0x68, 0x0, 0x9, 0x4, 0x0, @loopback, @empty, {[@timestamp={0x44, 0x18, 0xe, 0x0, 0x4, [0x3c8e, 0x0, 0x8, 0x6, 0x7ff]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000a40)={'ip_vti0\x00', &(0x7f00000009c0)={'gre0\x00', 0x0, 0x8, 0x80, 0x1, 0x80000000, {{0xb, 0x4, 0x1, 0x4, 0x2c, 0x68, 0x0, 0x9, 0x4, 0x0, @loopback, @empty, {[@timestamp={0x44, 0x18, 0xe, 0x0, 0x4, [0x3c8e, 0x0, 0x8, 0x6, 0x7ff]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000b40)={'syztnl0\x00', &(0x7f0000000a80)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x56, {{0x19, 0x4, 0x2, 0x19, 0x64, 0x65, 0x0, 0x6, 0x4, 0x0, @broadcast, @multicast2, {[@timestamp_addr={0x44, 0x3c, 0x4d, 0x1, 0xb, [{@local, 0x6}, {@empty, 0x72bf}, {@empty, 0x7}, {@rand_addr=0x64010102, 0xb}, {@local, 0x8}, {@private=0xa010102, 0x5}, {@broadcast, 0x3}]}, @cipso={0x86, 0x12, 0x3, [{0x0, 0xc, "bc71089f19b4ef714bc0"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000b80)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002f40)={&(0x7f0000000bc0)=@newtaction={0x2370, 0x30, 0x400, 0x70bd29, 0x25dfdbff, {}, [{0x235c, 0x1, [@m_skbedit={0xa8, 0x17, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9cf, 0x7fff, 0x20000000, 0x5, 0x3}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0x6}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}]}, {0x52, 0x6, "6a7955a2a3372fd4c49b7e99b15c8617fcb5374d8fbc4e9379d9419d354369d3f62f509f3463210e10b798ea51460d6e8a19be2bf95f46a49debfa1aa5aa85e462c66b320aad8e393328135c16bb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0x17c, 0x1d, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x7, 0x0, 0x3, 0x3ff}, 0x63}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x200, 0x20000000, 0xf84, 0x6}, 0x57}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x1, 0x1, 0x0, 0x8}, 0x63}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffff, 0x2, 0x2, 0xe51, 0x5}, 0x7a}}]}, {0xde, 0x6, "f8d410eb526625a09ec27d459819ff80d1f1df94304cfd790a66cb189d205e9d5a0ae84977b0e8649d07d16ccef67955fd230f91711db88b6260e43dd8306bd91e918c86450a9a2b0a921fcf52b05e3d3c62eac4ec61e85c7ea0431a91e5c5f2cb5cd2564a791138cb621f2baf27ca40130c1049dd8db9a572b76ffc8f3372df448ebd309c2fbb4899016a47f9a3f09bf83066086846cfdf1c4afd83ebfa06bb53ac28315ef1cec60f98a2ba68b03bb46d953e54a718db97eeb2c53d72e1db41249a9bbad4cfef0a59882ceb8e0c323a2224cc1ee02e549da376"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x100, 0x6, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x1, 0x1}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2, 0xfff3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x200, 0x1, 0x4, 0x3, 0xa}}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10000}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0x8}}]}, {0x81, 0x6, "e0670212fc89126f8eb6c9e5f53a7253b4e7c888d34a1c3d535e569fa4e9f21df764c443175f547feeeb38c6f7ee51161a5731e930deac1a516115740675de81124e8c8b4a8c1caab8025f81a8e141aa703726e7a60df0e82764c3b3ca1e1f4f7fa3d13749fdf3550ba5ef63f5af8b2fd4643105f51198b79a76ef2206"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_pedit={0x1e00, 0xa, 0x0, 0x0, {{0xa}, {0x1d14, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x88, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x4edcce4, 0x5, 0x4, 0x8000, 0xffffffff}, 0xf, 0xc5, [{0x401, 0x6, 0xacd6d05d, 0x91, 0x990, 0x4dc0}, {0x8, 0x6, 0x5, 0x5, 0xfffffbff, 0x1800000}]}, [{0xcc7, 0x6, 0xffffff39, 0x200, 0x0, 0x2}, {0x10, 0x5, 0x4, 0x0, 0x80000001, 0x6d0}, {0x8, 0xffff54d1, 0xd, 0x5, 0x8, 0x5}, {0x3c8, 0x2, 0x8, 0x3, 0x8, 0xa7}, {0x10, 0x2, 0x80, 0xba5a, 0x3, 0x44}, {0x2, 0x4, 0x8001, 0x7, 0x2, 0x9b}, {0xfffffffa, 0x2, 0x80000000, 0x81, 0x80000001, 0xb7f9}, {0x7e0, 0x2, 0x1, 0x0, 0x5, 0x2}, {0xb, 0x695, 0xffffff5e, 0x7, 0x5, 0x8}, {0xb, 0x3, 0x5, 0xff, 0x1, 0x4}, {0xdf3, 0x0, 0x7, 0xffff, 0x6, 0x3157}, {0x2, 0x8000, 0x73, 0x9, 0x45a80000, 0xe4}, {0x1, 0xb, 0x8, 0xc5b, 0xfffffffa}, {0x9d, 0x54, 0x1ff, 0x25, 0x2, 0x7}, {0xffffffff, 0xa, 0x3ff, 0x7, 0x8, 0x7}, {0x101, 0x13, 0x2, 0xa22c, 0x7fffffff}, {0x8000, 0x8, 0x9, 0x8, 0x7, 0x9e}, {0x0, 0x807, 0x35bb79b3, 0x5, 0x7ff, 0x7}, {0x10001, 0x8, 0x3, 0x6, 0x7, 0x9}, {0x4af, 0x3, 0x7, 0x800, 0x3, 0x6}, {0x1, 0x0, 0x80, 0x1, 0xc0000, 0x8}, {0xf, 0x7, 0x3, 0x0, 0x10, 0x4f}, {0x9c, 0x27, 0x0, 0x1, 0x8}, {0x6, 0x4, 0x3ff, 0x10, 0x0, 0x5}, {0x4, 0x30, 0x5, 0xd4bb, 0x8}, {0x4, 0x3, 0x3db, 0x4, 0x9, 0x10}, {0x1000, 0xffffffff, 0x9, 0x2, 0x6, 0x8}, {0x7, 0x9130, 0x7, 0x8, 0x1, 0xfff}, {0x4d, 0x9, 0x5, 0x8, 0x0, 0x7}, {0xf2, 0x3, 0x8, 0xd4, 0x80, 0x10000}, {0xaa8, 0x1, 0x8, 0x1, 0xc, 0x4}, {0xfffffc01, 0x7, 0x8, 0x3, 0x7e}, {0x8, 0x2, 0x7, 0xffffffab, 0x5, 0x3}, {0x2, 0x6, 0xf01, 0x3, 0x3, 0x9}, {0xff, 0x1, 0x6, 0xa651, 0x8, 0x7}, {0x1, 0x2, 0xf, 0x2, 0xfffffff8, 0xffffffff}, {0x10, 0x754, 0x1000, 0x2, 0x4}, {0x10000, 0xfffffffc, 0x6, 0x6, 0x800, 0xffff90cb}, {0x0, 0x4, 0x8, 0x101, 0x1, 0x6}, {0x0, 0x400, 0x7, 0x4, 0x8, 0x8}, {0x195, 0xfffffffe, 0x1cc, 0x2, 0x6, 0x854}, {0x1, 0x8, 0x4, 0x8, 0x2c3, 0x2}, {0x2, 0xb, 0x8, 0x7fffffff, 0x35df, 0xb6}, {0x4, 0x7, 0xb, 0xf7, 0x4, 0xffffffff}, {0x8, 0x7, 0x1, 0x7, 0x9, 0xfffffff9}, {0x7, 0x0, 0xffffafd9, 0x7e7e, 0x9}, {0x1, 0x7, 0x40, 0x4, 0x7, 0x4c91}, {0x7, 0x2, 0x800, 0x2, 0x40000000, 0x4a}, {0x0, 0x8000, 0x360ed1c1, 0x1, 0x4, 0x9}, {0xb99, 0xff, 0xf, 0xfffffffb, 0x7f, 0xf24b}, {0x1, 0x4, 0x8, 0x9, 0x8, 0x7}, {0x6, 0x8, 0x3, 0x7fff, 0x9, 0x8}, {0x80000000, 0x9, 0x80, 0xde, 0x2, 0xc0}, {0x9, 0x140000, 0x6, 0xd, 0xe8, 0x81}, {0x9, 0x3c000000, 0x5, 0xdbe, 0xff, 0xcf98}, {0x80000001, 0x0, 0xff, 0x6, 0xfffffff7, 0x4}, {0x8, 0xfffffff0, 0x2, 0x2f, 0x8001, 0x7}, {0x5, 0x7, 0x7, 0x0, 0x0, 0xfffffff9}, {0x200, 0x9, 0x4, 0x0, 0xa0c2, 0x5}, {0x734e, 0x0, 0xb, 0x1, 0x5, 0x4}, {0x7, 0x94f, 0xb9, 0x6, 0x9, 0x128e0}, {0xe, 0x3, 0x2, 0xa1, 0xcc8, 0x7}, {0x100, 0x380fe7f2, 0xfffffff8, 0x4, 0x6, 0xfffffff7}, {0xfbc3, 0x8, 0x4, 0xffffffff, 0x8000, 0x6}, {0x36, 0x9e6b, 0x6, 0xffff7fff, 0x6, 0x7}, {0x10, 0xf, 0xf, 0x2, 0x3105, 0x6}, {0x8dc, 0x6, 0x6, 0x1, 0x6, 0x8}, {0x5, 0x0, 0x0, 0x2, 0x9, 0x3c}, {0x8, 0xc, 0xffffffb0, 0x1, 0x3, 0xffff38ed}, {0x4, 0x3, 0x200, 0x2, 0x100, 0x7}, {0xc, 0xf51, 0x717, 0x0, 0x10001, 0x6}, {0x200, 0x101, 0x3, 0x7, 0x3, 0x3}, {0x4, 0xfff, 0x4, 0x800, 0x4, 0x7}, {0x1bdb75f6, 0xfffffff8, 0x4, 0x3, 0xd, 0x9}, {0x1, 0xbc4a, 0x0, 0x6, 0x4590, 0x6}, {0x2, 0x3, 0x51a, 0x7, 0xfffffffe, 0x3}, {0x7255, 0x84f, 0x2, 0x7, 0x9, 0xe8}, {0x100, 0x3, 0x81, 0x3, 0xf, 0xdd}, {0x7f, 0xcd96, 0x2, 0x7, 0x9b9, 0x9}, {0x8001, 0x0, 0xf6a5, 0x3, 0x6, 0x5}, {0xaf1, 0x0, 0x512b, 0x400, 0xe73, 0xffffffff}, {0x1, 0x9, 0xe, 0xe9, 0x9, 0xffffffff}, {0x4, 0x4, 0x8, 0x10, 0x4f2000, 0x4}, {0x6, 0x1, 0xfffffff0, 0x1ff, 0x5, 0xfffffd59}, {0x2, 0x0, 0x1ff, 0x5, 0x384, 0x3}, {0x8001, 0x9, 0xd9de, 0x1, 0x0, 0x3}, {0x2, 0x6, 0x0, 0x8, 0x1, 0x1f}, {0xa, 0x9, 0x6, 0x7fffffff, 0x3, 0xfff}, {0x3, 0x2, 0x2, 0xff, 0x1, 0x6}, {0x1d, 0x400, 0x4, 0x0, 0x3ff, 0x2}, {0xc4d, 0x6187, 0x4, 0x9, 0x7, 0x8}, {0xefb, 0x3e, 0xd79, 0x8, 0x8, 0x2}, {0x4e40, 0x1, 0x3, 0x8, 0x3, 0x4}, {0x2, 0xa, 0xffffffc0, 0xbe57, 0x10000, 0x1}, {0x67ee698, 0x10000, 0xc3, 0x1, 0xffff, 0xd}, {0x6, 0x2, 0x10000000, 0x8, 0x4b0, 0xe}, {0x87a, 0xd, 0x6, 0x5, 0x200000, 0x8980}, {0x2, 0x80000000, 0xe, 0x10000, 0x6a9a, 0x5}, {0x328, 0x2, 0x3, 0x5, 0x2, 0x1}, {0x5, 0x9, 0x400, 0x7fc, 0x7, 0x4}, {0xc, 0x6, 0x9, 0x80000001, 0x9, 0x7}, {0x6, 0x3, 0x7fffffff, 0x4, 0x100, 0x8}, {0x2, 0x7, 0x0, 0x7fff, 0x7fffffff, 0x9}, {0x3, 0x8, 0x401, 0x7, 0xa, 0x2}, {0x3ff, 0x7, 0x0, 0x2, 0x6, 0x3ff}, {0x1, 0x8, 0x36, 0x0, 0x4, 0x5}, {0x7fff, 0x5, 0x1, 0x800, 0xc, 0x3}, {0x3, 0x10000, 0x401, 0xf3, 0xed40}, {0x3, 0xff77, 0x5, 0x4cb4, 0x1, 0x7fffffff}, {0x4, 0xe0000, 0x401, 0x0, 0x3, 0xe9f9f80}, {0xfffffffc, 0x7, 0x3, 0xfffffffe, 0x21}, {0x3c8, 0x1, 0x7, 0x1, 0x9, 0x2}, {0x1, 0xffff1032, 0x2, 0x76e6, 0x5, 0x10000}, {0xc000000, 0x2, 0x2, 0x10001, 0x8, 0x8759}, {0x80, 0x8, 0x4, 0x1, 0xb, 0x5a3}, {0x5, 0x10000, 0x9, 0x3, 0xf, 0xfff}, {0x7, 0x4, 0x80000000, 0x5, 0x5, 0x6}, {0x8000, 0x3, 0x8, 0x0, 0x7, 0x7fffffff}, {0x1, 0x9, 0x8000, 0xc5, 0x6, 0xf}, {0xe, 0x100, 0x401, 0x2, 0x9, 0x1}, {0x0, 0x2, 0x1, 0x7, 0x3, 0x1}, {0x9, 0x3, 0xffffff54, 0xfffffff3, 0x10000, 0x7}, {0x6, 0xf4f, 0x2, 0x9, 0x200, 0x3}, {0x4, 0x1, 0x80000000, 0x968, 0x7, 0x7f}, {0x6, 0x6, 0x1417, 0x65, 0x1cfa, 0x5}, {0x10001, 0x8001, 0x1, 0x5, 0x8, 0xff29}, {0x8, 0x32, 0x6, 0x3, 0x0, 0x8}, {0xee0, 0x8, 0x8001, 0x3, 0x10001, 0x4}], [{0x3}, {0x0, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x3}, {0x5, 0x1}, {0x5}, {}, {0x3, 0xf94cfa6b4252833}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x5752143111e64d28, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5}, {0x1}, {0x2}, {0x4}, {0x2}, {0x2}, {0x5, 0x1}, {0x2}, {0x3}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0xb99d9ab4d36f471b}, {0x3}, {0x3}, {0x1, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x4}, {0x4, 0xd6a0f20126ce7acf}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x1}, {}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x5}, {0x1, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x2}, {0x4}, {0x1, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x2, 0x1eefe4a649dec69e}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x1}, {}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4}], 0x1}}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x8, 0xb3e4564, 0x5, 0xbfba}, 0x3, 0x8, [{0x9, 0x8, 0x2, 0x4, 0x80000000, 0x5}]}, [{0x7, 0x80000001, 0x7, 0xc1, 0xc190, 0x7}, {0x3, 0x3, 0x8, 0xfffffe01, 0x6, 0x4}, {0x80000000, 0x4, 0x88c0, 0x1, 0x2a, 0x9}, {0x6, 0x8, 0x4, 0xc, 0x0, 0x5}, {0x1, 0x3, 0x8001, 0x0, 0x4a9, 0x100}, {0x6, 0x6, 0x2, 0x8, 0x0, 0x26}, {0x0, 0xb2, 0x3, 0x3, 0x400, 0x2}, {0x3, 0x80000001, 0x7ff, 0x5, 0x8001, 0xae}, {0x1, 0x4, 0x8, 0x3, 0x8, 0x7}, {0x24d, 0xd, 0x1eb1, 0x80, 0x100000, 0xa2}, {0x7fffffff, 0x8, 0x6, 0x5, 0x2, 0xe1d}, {0x7a, 0x0, 0x7, 0x8398, 0x7, 0x3}, {0x3, 0x8000, 0x2, 0x987, 0x7fffffff, 0xf5d2}, {0x1, 0x6, 0x7ff, 0x8000, 0x59d3, 0x8}, {0xf6, 0x2b8, 0x8, 0x3, 0xfffff983, 0x7}, {0x7ff, 0x8, 0x5, 0x2, 0x4, 0x9}, {0x5, 0x1ff, 0x4, 0xc920, 0x4, 0x9}, {0x7, 0x8, 0x2, 0x2, 0x1, 0x1}, {0x5, 0x5, 0x400, 0x4, 0x1, 0x1000000}, {0x47, 0x7, 0xffff, 0x5, 0x2}, {0xe0, 0x5, 0x0, 0x8, 0x4, 0x3}, {0xe40, 0x3, 0x401, 0x3, 0x2, 0x7ff}, {0x81, 0x9, 0xd9, 0x3, 0x6, 0xa}, {0x1, 0xfff, 0xe, 0xe, 0xfff, 0x7}, {0x9, 0x10001, 0x0, 0x1, 0x96c, 0x2}, {0x100, 0x4, 0x1, 0x7, 0x2, 0xa5c}, {0x4, 0xfffffffd, 0x3, 0x6, 0x5, 0x4}, {0xfffffffc, 0x8000, 0x3, 0x5, 0x10, 0x2e4}, {0xbd0, 0xfffffffa, 0x8, 0x2, 0x3, 0x4}, {0x8, 0x8e, 0x8, 0x2, 0x8, 0x160}, {0x4, 0xfffffff8, 0x7, 0x6, 0x8, 0x8}, {0x4, 0x0, 0xfffffff4, 0x1, 0xffff, 0x1}, {0x2, 0x7, 0x5, 0x4, 0x7, 0x7}, {0xb, 0x5, 0x6, 0xfe00, 0x9, 0x8}, {0xfffffffc, 0x81, 0x6, 0x4, 0x9, 0x2}, {0x3ff, 0xd, 0x9, 0x2, 0x0, 0x2}, {0x4, 0x0, 0x2, 0x0, 0x8, 0x2}, {0x3, 0x7, 0xbf, 0x6db6, 0x4, 0x2c1c}, {0x9, 0x1, 0xfffffff8, 0xff, 0x7, 0xc}, {0x3, 0xffffffff, 0xb09, 0x9, 0xad, 0x9}, {0x4, 0x5, 0x0, 0x8c, 0x9, 0x1}, {0x3, 0x2, 0x2, 0xffffff97, 0x8, 0xfbdf}, {0x80000000, 0x8, 0xfffffff5, 0x6, 0x80000000, 0x2}, {0x8, 0x80, 0xdbf1, 0xfff, 0x7, 0x1}, {0x9, 0x352, 0x8, 0xd, 0xffffff80, 0x3}, {0xce, 0x9, 0x7ff, 0x10001, 0xf3, 0x7}, {0x44, 0x5, 0x4, 0x2, 0x5b6, 0x7}, {0x8, 0x80000000, 0x9, 0xfff, 0x8, 0x2}, {0xd, 0xfffff000, 0x0, 0x7, 0x1, 0x4}, {0x6, 0x10, 0x5, 0x5, 0x89cb66d, 0x6}, {0x10, 0x8, 0x2, 0x158d, 0x4fb, 0x5}, {0x7, 0x0, 0x63, 0x0, 0x5, 0x1}, {0x6296, 0xb8c1, 0x1, 0x8, 0x1d70, 0x2}, {0x7, 0x6, 0x2, 0xa51b, 0x47afac5e, 0x1}, {0x6, 0x0, 0xff, 0x400, 0x9, 0x49}, {0x9, 0x8, 0xf22c, 0xfffffff0, 0x0, 0x7}, {0x3, 0x200, 0x2c11, 0x101, 0x6, 0xc}, {0x80000001, 0x1000, 0x5, 0x8, 0xffffff67, 0x4}, {0x5b3, 0x9, 0x2, 0x7, 0x5, 0x3}, {0x9, 0x4, 0x1000, 0x2, 0x5, 0x7}, {0x2, 0x9, 0x1, 0x7fff, 0x7aff, 0x5}, {0x2, 0x56, 0x2, 0x7, 0x0, 0x4}, {0xfa1, 0x9, 0x5, 0x3, 0x7, 0x80000000}, {0x7, 0x67d09f98, 0x5, 0x1ff, 0x2c0, 0x101}, {0x9, 0x7, 0x8, 0x140, 0x7, 0x83d9}, {0x2, 0x4, 0x0, 0x80, 0x5, 0xfffffffb}, {0x2, 0x7, 0x200, 0x3, 0x8aa0, 0x400}, {0x6, 0xfffffffa, 0x5, 0x3, 0xffffffff, 0xfffffffb}, {0x3, 0x1, 0x8, 0x80000000, 0x1, 0x64}, {0x3, 0x1, 0x80000001, 0x4, 0x86, 0x4}, {0x7, 0x46c, 0x6, 0x39, 0xffffff81, 0x8000}, {0xff01, 0x31b5, 0xc4, 0x3, 0x5, 0x101}, {0xb4, 0x0, 0xfffffff8, 0x80000001, 0x7, 0x4}, {0xb5, 0x4, 0x5, 0x4, 0x1ff, 0x8}, {0x0, 0x6, 0x8e60, 0x10001, 0x7688080c, 0x61}, {0x9, 0x200, 0x6, 0x1, 0x9, 0x7}, {0x6, 0x0, 0x8, 0x9, 0xabbe, 0xffffffff}, {0x5, 0x0, 0x0, 0xfffff076, 0x4, 0x5}, {0x80000001, 0x1000, 0x2, 0x6, 0x17d, 0x9}, {0xbc1, 0x2, 0x0, 0x6, 0x4, 0x8}, {0x6, 0x7, 0x1, 0xfffffffc, 0x3ff, 0x200}, {0x0, 0x3, 0x6, 0x6, 0xc1, 0x7}, {0x2, 0x81, 0x7, 0x9957, 0x26, 0x2}, {0x0, 0x7, 0xfff, 0x10001, 0x3, 0x6}, {0x9, 0x69d4, 0x1, 0x5, 0x3, 0xfffffffa}, {0x80000000, 0x7, 0x0, 0x2, 0x200, 0x2}, {0x851c, 0xb5, 0xc99a, 0x4, 0xf, 0x5}, {0x1000, 0x9, 0x8, 0x2, 0x6}, {0x0, 0x3, 0xffffff00, 0x4, 0x4, 0x6}, {0x400, 0xd, 0x155b, 0x554, 0x0, 0x6}, {0xb, 0x716943ef, 0x4, 0x6, 0x9, 0xb84d}, {0x1, 0x5, 0x7e9f, 0x1, 0xb, 0x4}, {0x4, 0x3, 0x8, 0x0, 0x9, 0x81}, {0x1000, 0x4, 0x7, 0x9, 0x1, 0x5}, {0xc, 0x6, 0x10000, 0x6, 0x5, 0x7fffffff}, {0x8, 0x7, 0x4, 0x8, 0x3c, 0x9}, {0x3, 0x4, 0xc, 0x3d144b69, 0x2, 0x5}, {0xc7eb, 0x6, 0xfffffffe, 0x7638, 0x0, 0x4}, {0x6, 0xffff, 0x8, 0xfffffff7, 0x1, 0x1}, {0x401, 0x8, 0x5, 0xed, 0x1, 0x7ff}, {0x4, 0x10001, 0x4ad, 0x6, 0x8, 0x7fff}, {0x7, 0x0, 0xb2, 0x401, 0x2, 0xe}, {0xfffffffe, 0x5, 0x5, 0x7, 0x8, 0x101}, {0x5, 0x8, 0xfffffff7, 0x8001, 0xb, 0x8000}, {0xfffff000, 0x3, 0x8000, 0x6, 0x0, 0x2}, {0xae8e, 0xc, 0x8699, 0x6, 0x0, 0xcd}, {0x7fff, 0x6, 0x3, 0x1, 0x61af, 0x941a}, {0xfffffff8, 0xd, 0xfff, 0x0, 0x2, 0x3ff}, {0x9, 0x6, 0x80000000, 0xa0, 0x6, 0xe}, {0x8, 0xfffffffb, 0x7f, 0x4, 0x2, 0x10000}, {0x101, 0xe4, 0x1, 0x9, 0x44f9, 0xfff}, {0x800, 0x1, 0xffffff00, 0x2, 0x3, 0xff}, {0xfffffff7, 0x1, 0xb, 0x7, 0x7, 0x9}, {0x6, 0x3, 0x9, 0x4, 0x7ff, 0xaf5}, {0x6, 0x10000, 0x9, 0x7, 0x5, 0x3f0}, {0x2, 0x6, 0x4000000, 0x6, 0x7000000, 0x3}, {0x3ce, 0x1, 0x6, 0xfffffff7, 0x6, 0xfffffffa}, {0xc, 0x80, 0x3, 0xd, 0x5}, {0x8, 0x3, 0x2, 0xffff, 0x2, 0x4}, {0x71fc, 0x9, 0x4000000, 0x3, 0x4, 0x80000000}, {0xe649, 0x3, 0x3, 0x9, 0x10001, 0x2}, {0x7fffffff, 0x2af9, 0x2, 0x9, 0xf3c, 0x11ddaa4}, {0x3, 0x7, 0x7, 0x9, 0x6, 0x1}, {0x0, 0x2, 0x1, 0x10, 0x0, 0x9}, {0x3, 0x18000000, 0x10001, 0x1, 0x7, 0x80000001}, {0x9, 0x1000, 0x0, 0x1d, 0x200000, 0x2}, {0x1, 0x10, 0x1, 0xa991, 0x5}, {0x7, 0x40, 0xa8, 0x0, 0x4, 0x3}], [{0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0xf, 0x1}, {0x3}, {0x4}, {}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {}, {}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x2}, {0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x1}, {}, {}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x4}, {0x5}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x6, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}]}}]}, {0xc4, 0x6, "56152b82ed0d2f5cf3dbee1e90510fa5d9107355e0ec7572d138f57ae3833324365c0e840342c70388a65d263bb010d97356a712db58bb2f2e1e88a5b299a3884c988ef3a1d95efffc545a2cb67c1681406d25a32dd5ffd4962d494d322f2a12189ce5c1a41cf7913fef2938e44fb216e0999b11d36e50f7189f8265276c26ef246703cd818bd986af5eb797ab81eecf34904f0a879cd7dd99ebe707db4ebc48810295fe48ae7505439477596e90ef8d35debbc0e2861f8ac7d5a9f145aee4ce"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_simple={0x64, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa, 0x3, 'wlan0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x101, 0x30000005, 0x40, 0xa5ec}}]}, {0x14, 0x6, "e6afaee47c50279e4f66aa531ff0e987"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x1d0, 0x18, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x1, 0x0, 0x2, 0x200}, 0x3, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfff, 0x2, 0x20000000, 0x5, 0x4c8}, 0x3, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3ff, 0x2, 0x6, 0x8, 0x401}, 0x3, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffb, 0x9, 0x3, 0x8, 0x2}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x16, 0x620b, 0x8, 0x4, 0x1}, 0x1, r12}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xff, 0x3, 0x7, 0x6, 0x10001}, 0x4, r13}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x8, 0x8, 0x400, 0x4}, 0x1, r14}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x32, 0xe386, 0x8, 0x4}, 0x4, r15}}]}, {0xa4, 0x6, "0c422cfc1aadf39e4637ae4f288bb54505586095773229cf15ce4c7889b9f1c271c15a1e2343024850dff129ce8a81d5891887adba06fd76323e7d668a693c1a7e759850d3f1b9ffdf82dda88dee36eb0286c0c1c90c7ea25783bae210f78eb514474454570fe38775c217c570fbd6366681bbd92d58c059b1396e0bb2a9bc9852d2cbf2e64911c2e200e33c9828b9756f191865a7df3ee6f4f58963cd2c6362"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x2370}, 0x1, 0x0, 0x0, 0x60000800}, 0x4041) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003280)={r4, 0xe0, &(0x7f0000003180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000002fc0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000003000)=[0x0, 0x0], &(0x7f0000003040)=[0x0], 0x0, 0x96, &(0x7f0000003080)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000030c0), &(0x7f0000003100), 0x8, 0x2b, 0x8, 0x8, &(0x7f0000003140)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003280)={r4, 0xe0, &(0x7f0000003180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000002fc0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000003000)=[0x0, 0x0], &(0x7f0000003040)=[0x0], 0x0, 0x96, &(0x7f0000003080)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000030c0), &(0x7f0000003100), 0x8, 0x2b, 0x8, 0x8, &(0x7f0000003140)}}, 0x10) r17 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000032c0)={r3, r15, 0x25, 0x8, @val=@target_btf_id=r16}, 0x14) r18 = syz_genetlink_get_family_id$devlink(&(0x7f0000003340), r17) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000003400)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000033c0)={&(0x7f0000003380)={0x3c, r18, 0x300, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040044}, 0x8000) (async) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000003400)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000033c0)={&(0x7f0000003380)={0x3c, r18, 0x300, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040044}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000003440), r3) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000003440), r3) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000003480)={0xffffff01, 0x7, 0x63}, 0xc) unshare(0x0) (async) unshare(0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000003500), r4) (async) r19 = syz_genetlink_get_family_id$devlink(&(0x7f0000003500), r4) sendmsg$DEVLINK_CMD_SB_GET(r17, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x3c, r19, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) sendmsg$DEVLINK_CMD_SB_GET(r17, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x3c, r19, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800) 151.836485ms ago: executing program 2 (id=7929): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 32) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xfffffd6d, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 119.848886ms ago: executing program 4 (id=7930): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) socket$igmp6(0xa, 0x3, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r4, r4, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r5, 0x4) r6 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r6, 0x111, 0x2, 0x0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r5, 0x0, 0x0}, 0x10) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000300)={0x2148, {{0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}, {{0xa, 0x4e23, 0x8000000, @mcast2, 0xc}}}, 0x108) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @private0, [0xff, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xff000000], 'wlan0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x2c, 0xc7, 0x6, 0x61}, 0x0, 0x168, 0x190}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x4, 0x6}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xffffffffffffffa4) 81.069101ms ago: executing program 0 (id=7931): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000344000480400001800e000100627974656f726465720000002c000280080001400000000908000240000000000800044000000000080003400000000108000540000000040900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a763bcddb0cd26b868f29d89c771cf9825aec68dcefdd"], 0x98}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYBLOB="20077c001c0c00ff0100000000000000000000000000000000dfe90d4327"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x24008030) sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 5.621384ms ago: executing program 3 (id=7932): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000000110300000000001500000000000100000d000000000f00000000000000020000000000000c02000000000061"], 0x0, 0x4c}, 0x20) (async) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x5, 0x0, 0xffffff8f}, 0xc) 0s ago: executing program 2 (id=7933): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180)={0x0, 0x100}, 0x8) bind$rds(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100090808004149004001040800", 0x58}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111370000000000851000002f7840656be076fb0d4002000000850000000500000033f713d5344bbe8f6dbc0a95000000008e5af6c187aa5f2cc00000"], &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000400000000000000a20000000000a03000000000000000000070000000900010073797a300000000058000000090a010400000000000000000700000008000a4000000000090002007300010073797a3000000000080005400000000d080003400000001008000840000000010c0009800800014000000009140000001000010000000000000000000084000a2d40082238cd60c08ed1390d72ecaccf45e86d941ce245cf6d200000000000000000"], 0xa0}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x2, 0x2, {0x4000}}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0xfa, 0xf, 0x100, 0x3, 0x1, 0x3, 0xb}}, {0x0, 0x2, [0xa37, 0xfff, 0x8]}}, {{0x0, 0x1, {0xaa, 0x0, 0x7, 0x7, 0x1, 0x1, 0xfffffffe}}, {0x0, 0x2, [0x6, 0x8, 0x9]}}]}]}, 0x38}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1d, 0x2, 0x6) setsockopt$RDS_CANCEL_SENT_TO(r7, 0x6a, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@getqdisc={0x24, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x10, 0x8}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd23, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048844}, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00!', @ANYRES16=r9, @ANYRESHEX=r9, @ANYRES8=r9, @ANYRES16=r9, @ANYRES16=r9, @ANYRESHEX=r9], 0x5c}}, 0x0) kernel console output (not intermixed with test programs): out of bounds [ 652.241706][T28365] tc action pedit 'at' offset 257 out of bounds [ 652.248070][T28365] tc action pedit 'at' offset 257 out of bounds [ 652.254491][T28365] 0: reclassify loop, rule prio 0, protocol 800 [ 652.258071][T28380] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6358'. [ 652.262852][ T5833] Bluetooth: hci5: command 0x0406 tx timeout [ 652.330268][T28043] veth0_vlan: entered promiscuous mode [ 652.528576][T28043] veth1_vlan: entered promiscuous mode [ 652.691423][T28404] IPv6: NLM_F_CREATE should be specified when creating new route [ 652.722171][T28043] veth0_macvtap: entered promiscuous mode [ 652.758368][T28043] veth1_macvtap: entered promiscuous mode [ 652.819097][T28043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.845487][T28043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.861694][ T51] Bluetooth: hci4: command tx timeout [ 652.898360][ T9276] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.928519][T28412] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6368'. [ 652.945577][ T103] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.960063][ T103] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.004501][ T103] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.047914][T28416] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6369'. [ 653.070923][T28416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6369'. [ 653.312026][T28430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6371'. [ 653.348945][ T103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.383333][ T103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.481242][T13603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.497730][T13603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.800577][T28457] nbd: must specify an index to disconnect [ 653.809898][T28458] netlink: 'syz.1.6379': attribute type 3 has an invalid length. [ 654.273182][T10454] IPVS: starting estimator thread 0... [ 654.273749][T28487] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 654.369734][T28492] IPVS: using max 34 ests per chain, 81600 per kthread [ 654.446903][T28500] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 654.676231][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 654.689053][T28500] bond1 (unregistering): Released all slaves [ 654.696038][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 654.707385][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 654.727795][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 654.739733][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 654.944710][ T51] Bluetooth: hci4: command tx timeout [ 655.601940][T28512] wg1 speed is unknown, defaulting to 1000 [ 656.125607][T28580] veth3: entered promiscuous mode [ 656.131848][T28580] veth3: entered allmulticast mode [ 656.484888][T28605] __nla_validate_parse: 10 callbacks suppressed [ 656.484909][T28605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6407'. [ 656.562961][T28605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6407'. [ 656.597559][T28512] chnl_net:caif_netlink_parms(): no params data found [ 656.859835][ T51] Bluetooth: hci0: command tx timeout [ 656.906365][T28634] netlink: 'syz.4.6413': attribute type 1 has an invalid length. [ 656.977590][T28634] 8021q: adding VLAN 0 to HW filter on device bond2 [ 656.995298][T28512] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.023910][T28512] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.037653][T28512] bridge_slave_0: entered allmulticast mode [ 657.069934][T28512] bridge_slave_0: entered promiscuous mode [ 657.082529][T28512] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.098897][T28512] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.106112][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 657.106146][ C0] lec:lec_tx_timeout: lec0 [ 657.115767][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 657.180000][T28512] bridge_slave_1: entered allmulticast mode [ 657.187962][T28512] bridge_slave_1: entered promiscuous mode [ 657.361814][T28512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.394704][T28512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.520882][T28661] tipc: Cannot configure node identity twice [ 657.564568][T28512] team0: Port device team_slave_0 added [ 657.596476][T28512] team0: Port device team_slave_1 added [ 657.768647][T28512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.786310][T28512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.817809][T28512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.834829][T28512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.864218][T28512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.949918][T28512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.962051][T28683] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6423'. [ 657.971656][T28683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6423'. [ 658.104433][T28512] hsr_slave_0: entered promiscuous mode [ 658.121696][T28512] hsr_slave_1: entered promiscuous mode [ 658.128674][T28512] debugfs: 'hsr0' already exists in 'hsr' [ 658.161788][T28512] Cannot create hsr debugfs directory [ 658.409061][T28707] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.6428'. [ 658.418873][T28707] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 658.634460][T28722] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6429'. [ 658.648425][T28722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6429'. [ 658.665966][T28512] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 658.691009][T28720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6432'. [ 658.730123][T28719] syzkaller0: entered promiscuous mode [ 658.735649][T28719] syzkaller0: entered allmulticast mode [ 658.846326][T28512] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 658.948911][ T51] Bluetooth: hci0: command tx timeout [ 658.981059][T28512] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 659.004189][T28752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6438'. [ 659.106869][T28512] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 659.414488][T28512] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 659.454168][T28512] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 659.494429][T28512] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 659.519281][T28512] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 659.531611][T28512] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 659.545528][T28512] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 659.584996][T28512] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 659.608681][T28512] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 659.763154][T28512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.798685][T28512] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.811875][T28803] l2tp_ppp: sess 2/0: no socket in recv [ 659.832119][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.839303][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.857782][T28803] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6452'. [ 659.884015][T16748] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.891609][T16748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.944363][T28805] syzkaller1: entered promiscuous mode [ 659.962225][T28805] syzkaller1: entered allmulticast mode [ 659.967163][T28812] netlink: 'syz.0.6455': attribute type 21 has an invalid length. [ 660.174840][T28823] netlink: 'syz.0.6460': attribute type 5 has an invalid length. [ 660.573971][T28850] netlink: 'syz.0.6468': attribute type 1 has an invalid length. [ 660.653115][T28850] bond1: entered promiscuous mode [ 660.658680][T28850] 8021q: adding VLAN 0 to HW filter on device bond1 [ 660.693784][T28855] bond1: (slave bridge1): making interface the new active one [ 660.702264][T28855] bridge1: entered promiscuous mode [ 660.709232][T28855] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 660.758763][T28854] bond1: entered promiscuous mode [ 660.765697][T28854] bond1: entered allmulticast mode [ 660.771656][T28854] 8021q: adding VLAN 0 to HW filter on device bond1 [ 660.819516][T28512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.883073][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 660.883091][ T30] audit: type=1107 audit(1776183772.687:19): pid=28865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¡)²b\­=¾ªœ¾ÄœÆ' [ 660.914907][T28512] veth0_vlan: entered promiscuous mode [ 660.952722][ T30] audit: type=1107 audit(1776183772.687:20): pid=28865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='b‚éf¦*h_Ÿf®ÈåvÈ@_ð OÚU-vš/õ™¡ª¤«Ò§yÇ!øg' [ 660.989100][T28512] veth1_vlan: entered promiscuous mode [ 661.023661][T28512] veth0_macvtap: entered promiscuous mode [ 661.025142][ T51] Bluetooth: hci0: command tx timeout [ 661.034460][T28512] veth1_macvtap: entered promiscuous mode [ 661.052964][T28874] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 661.060349][T28874] IPv6: NLM_F_CREATE should be set when creating new route [ 661.105054][T28512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.146960][T28512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.208914][ T103] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.236489][ T103] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.254616][T28887] netlink: 'syz.1.6480': attribute type 3 has an invalid length. [ 661.261392][ T103] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.307882][ T103] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.457881][ T103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.491326][ T103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.547928][T28900] netlink: 'syz.0.6483': attribute type 2 has an invalid length. [ 661.548683][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.573253][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.646804][T28907] __nla_validate_parse: 5 callbacks suppressed [ 661.646822][T28907] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6487'. [ 661.669415][T28907] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6487'. [ 661.783080][T28913] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 661.817757][T28915] netlink: 320 bytes leftover after parsing attributes in process `syz.2.6388'. [ 661.875251][T28923] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6388'. [ 661.888108][T28913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6488'. [ 662.031792][T28921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6490'. [ 662.119898][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 662.127962][ C0] lec:lec_tx_timeout: lec0 [ 662.132630][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 662.201791][T28934] vlan2: entered promiscuous mode [ 662.227422][T28934] geneve1: entered promiscuous mode [ 662.250572][T28934] vlan2: entered allmulticast mode [ 662.263235][T28934] geneve1: entered allmulticast mode [ 662.285617][T28937] syzkaller0: entered promiscuous mode [ 662.338422][T28940] netlink: 'syz.0.6498': attribute type 1 has an invalid length. [ 662.365825][T28940] netlink: 'syz.0.6498': attribute type 2 has an invalid length. [ 662.417205][T28940] netlink: 'syz.0.6498': attribute type 1 has an invalid length. [ 662.470867][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.021008][T10470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.100576][ T51] Bluetooth: hci0: command tx timeout [ 663.504171][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.509006][T29000] netlink: 592 bytes leftover after parsing attributes in process `syz.4.6515'. [ 663.515004][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.658993][T29006] netlink: 'syz.3.6517': attribute type 2 has an invalid length. [ 663.671596][T29006] netlink: 'syz.3.6517': attribute type 2 has an invalid length. [ 664.031010][T29022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6523'. [ 664.270666][T29038] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 664.445023][T29051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6532'. [ 664.540842][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.618136][T29061] syzkaller1: entered promiscuous mode [ 664.640187][T29061] syzkaller1: entered allmulticast mode [ 664.663702][T29055] netlink: 'syz.1.6535': attribute type 1 has an invalid length. [ 664.686427][T29055] netlink: 'syz.1.6535': attribute type 11 has an invalid length. [ 664.719731][T29055] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6535'. [ 664.785668][T10470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.797537][T10454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.960386][T29078] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 665.127503][T29089] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 665.420508][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.583434][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.714211][T29126] xt_ecn: cannot match TCP bits for non-tcp packets [ 665.785945][T10470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.928452][T29134] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan1 [ 666.104613][T29141] erspan0: entered promiscuous mode [ 666.340549][T29156] syzkaller0: entered promiscuous mode [ 666.346603][T29156] syzkaller0: entered allmulticast mode [ 666.606845][T29166] ip6erspan0: entered promiscuous mode [ 666.648171][T29167] syzkaller0: entered promiscuous mode [ 666.672247][T29167] syzkaller0: entered allmulticast mode [ 666.781969][T29171] __nla_validate_parse: 6 callbacks suppressed [ 666.781991][T29171] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6572'. [ 666.925342][T29178] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 667.026242][T29184] netlink: 'syz.4.6580': attribute type 10 has an invalid length. [ 667.056194][T29186] netlink: 300 bytes leftover after parsing attributes in process `syz.3.6579'. [ 667.090918][T29184] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 667.139910][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 667.148346][ C0] lec:lec_tx_timeout: lec0 [ 667.153093][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 667.173435][T29184] team0: Port device netdevsim0 added [ 667.288304][T29198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6585'. [ 667.367172][T29204] netlink: 632 bytes leftover after parsing attributes in process `syz.4.6587'. [ 667.664236][ T9528] net_ratelimit: 3 callbacks suppressed [ 667.664254][ T9528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.773444][T29229] netlink: 'syz.0.6599': attribute type 4 has an invalid length. [ 667.833069][T10470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.318181][T29260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.327656][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.598886][T29278] netlink: 'syz.2.6619': attribute type 3 has an invalid length. [ 668.710396][ T9528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.052359][T29294] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6626'. [ 669.065313][T29294] netem: incorrect gi model size [ 669.074734][T29294] netem: change failed [ 669.621547][T29323] pim6reg9: entered allmulticast mode [ 669.630783][T29323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.639910][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.727197][T29329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6643'. [ 669.743363][ T9528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.106234][T29351] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6653'. [ 670.136161][T29348] syzkaller0: entered promiscuous mode [ 670.142773][T29348] syzkaller0: entered allmulticast mode [ 670.216753][T29352] pim6reg: entered allmulticast mode [ 670.791392][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.817453][T29372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6662'. [ 670.862024][T10473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.081824][T29391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6671'. [ 671.137058][T29394] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.6672'. [ 671.243569][T29400] netlink: 'syz.2.6676': attribute type 1 has an invalid length. [ 671.266571][T29400] netlink: 'syz.2.6676': attribute type 1 has an invalid length. [ 672.119119][T29451] xt_hashlimit: max too large, truncated to 1048576 [ 672.159615][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 672.168138][ C0] lec:lec_tx_timeout: lec0 [ 672.173857][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 672.625337][T29482] __nla_validate_parse: 3 callbacks suppressed [ 672.625361][T29482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6695'. [ 672.863124][ T5894] net_ratelimit: 13 callbacks suppressed [ 672.863143][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.081707][T29509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6704'. [ 673.242863][T29527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6708'. [ 673.291769][T29526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.312640][T29526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.557323][T29535] syzkaller0: entered promiscuous mode [ 673.601075][T29535] syzkaller0: entered allmulticast mode [ 673.617917][T29537] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 673.663775][T29545] tap0: tun_chr_ioctl cmd 1074025678 [ 673.669947][T29545] tap0: group set to 0 [ 673.811190][T29547] netlink: 'syz.0.6715': attribute type 10 has an invalid length. [ 673.906980][T10454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.916557][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.334701][T29557] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6718'. [ 674.511654][T29562] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6719'. [ 674.578947][T29563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6719'. [ 674.592116][T29563] nbd: must specify a size in bytes for the device [ 674.947298][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.031245][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.666443][T10454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.990945][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.168256][T29547] veth0_vlan: left promiscuous mode [ 676.176044][T29547] veth0_vlan: entered promiscuous mode [ 676.187570][T29547] team0: Device veth0_vlan failed to register rx_handler [ 676.226542][T29562] netlink: 404 bytes leftover after parsing attributes in process `syz.2.6719'. [ 676.247340][T29562] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6719'. [ 676.278714][T29562] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6719'. [ 676.298863][T29562] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6719'. [ 676.308589][T10454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.353372][T29570] xt_hashlimit: size too large, truncated to 1048576 [ 676.424499][T29565] –: renamed from vxcan1 (while UP) [ 676.481155][T29576] netlink: 'syz.2.6723': attribute type 11 has an invalid length. [ 676.567880][T29580] 8021q: adding VLAN 0 to HW filter on device bond3 [ 676.732964][T29579] delete_channel: no stack [ 677.031714][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.190034][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 677.198130][ C0] lec:lec_tx_timeout: lec0 [ 677.203349][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 677.228368][T29632] ipvlan2: entered allmulticast mode [ 677.234643][T29632] syz_tun: entered allmulticast mode [ 677.399508][T29638] can: request_module (can-proto-3) failed. [ 677.546925][T29650] lo speed is unknown, defaulting to 1000 [ 677.692353][T29650] lo speed is unknown, defaulting to 1000 [ 677.707687][T29653] netlink: 'syz.1.6748': attribute type 2 has an invalid length. [ 677.806678][T29659] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 677.824285][T29650] lo speed is unknown, defaulting to 1000 [ 677.866907][T29670] netlink: 'syz.0.6751': attribute type 10 has an invalid length. [ 677.911323][T29670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.917848][T29672] netlink: 'syz.0.6751': attribute type 10 has an invalid length. [ 677.942266][T29670] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 677.943216][T29672] __nla_validate_parse: 8 callbacks suppressed [ 677.943232][T29672] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6751'. [ 677.992816][T29672] batadv0: entered promiscuous mode [ 677.998251][T29672] batadv0: entered allmulticast mode [ 678.005951][T29672] bond0: (slave batadv0): Releasing backup interface [ 678.022374][T29672] bridge0: port 3(batadv0) entered blocking state [ 678.029130][T29672] bridge0: port 3(batadv0) entered disabled state [ 678.060537][T10454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.070952][ T49] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 678.080956][ T49] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 678.211146][T29681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6754'. [ 678.260928][T29681] syzkaller1: entered promiscuous mode [ 678.266827][T29681] syzkaller1: entered allmulticast mode [ 678.444345][T29650] infiniband syz2: set active [ 678.449170][ T5894] lo speed is unknown, defaulting to 1000 [ 678.456763][T29650] infiniband syz2: added lo [ 678.465922][T29650] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 678.468207][T29650] infiniband syz2: Couldn't open port 1 [ 678.546388][T29650] RDS/IB: syz2: added [ 678.555057][T29650] smc: adding ib device syz2 with port count 1 [ 678.581309][T29705] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.6762'. [ 678.594174][T29650] smc: ib device syz2 port 1 has no pnetid [ 678.626451][ T5894] lo speed is unknown, defaulting to 1000 [ 678.638836][T29650] lo speed is unknown, defaulting to 1000 [ 678.668050][T29714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6763'. [ 678.865960][T29727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.874915][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.889040][T29727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.897641][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.900549][T29726] netlink: 300 bytes leftover after parsing attributes in process `syz.1.6767'. [ 679.020642][ T65] wlan1: Trigger new scan to find an IBSS to join [ 679.118769][T29650] lo speed is unknown, defaulting to 1000 [ 679.210462][T29746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6773'. [ 679.304672][T29750] netlink: 'syz.3.6775': attribute type 1 has an invalid length. [ 679.335225][T29750] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.6775'. [ 679.347508][T29750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6775'. [ 679.358833][T29750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6775'. [ 679.376731][T29752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6776'. [ 679.398865][T29750] Bluetooth: MGMT ver 1.23 [ 679.502404][T10470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.609506][T29770] netlink: 'syz.3.6780': attribute type 1 has an invalid length. [ 679.749462][T29774] syzkaller0: entered promiscuous mode [ 679.755985][T29774] syzkaller0: entered allmulticast mode [ 679.767420][T29650] lo speed is unknown, defaulting to 1000 [ 679.817706][T29778] bond2 (unregistering): Released all slaves [ 680.156159][T10470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.780809][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.195114][T29650] lo speed is unknown, defaulting to 1000 [ 682.539929][T10473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.551435][ T49] tipc: Subscription rejected, illegal request [ 682.832777][T29811] wg1 speed is unknown, defaulting to 1000 [ 682.839484][T29650] lo speed is unknown, defaulting to 1000 [ 683.232563][T29853] __nla_validate_parse: 7 callbacks suppressed [ 683.232587][T29853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6801'. [ 683.277902][T29853] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6801'. [ 683.339673][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6130 ms [ 683.347806][ C0] lec:lec_tx_timeout: lec0 [ 683.353552][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 683.369885][T10470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.493889][T29811] lo speed is unknown, defaulting to 1000 [ 683.665513][T29873] netlink: 'syz.2.6805': attribute type 9 has an invalid length. [ 683.926987][T29886] netlink: 'syz.2.6809': attribute type 1 has an invalid length. [ 683.935271][T29886] netlink: 476 bytes leftover after parsing attributes in process `syz.2.6809'. [ 683.959952][T29886] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.6809'. [ 683.982067][T13607] wlan1: Trigger new scan to find an IBSS to join [ 684.001620][T29650] lo speed is unknown, defaulting to 1000 [ 684.067903][T29888] netlink: 198364 bytes leftover after parsing attributes in process `syz.3.6810'. [ 684.110257][T29893] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6811'. [ 684.352627][T29877] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6808'. [ 684.399524][T29877] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6808'. [ 684.528721][T29650] lo speed is unknown, defaulting to 1000 [ 684.605587][T29906] netlink: 9072 bytes leftover after parsing attributes in process `syz.3.6815'. [ 684.623468][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.649828][T29906] netlink: 6539 bytes leftover after parsing attributes in process `syz.3.6815'. [ 684.784267][T29650] lo speed is unknown, defaulting to 1000 [ 685.033632][T29650] lo speed is unknown, defaulting to 1000 [ 685.040304][T29916] syz_tun: entered allmulticast mode [ 685.040829][T29918] netlink: 'syz.1.6819': attribute type 1 has an invalid length. [ 685.583972][T10473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.665044][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.363191][ T103] wlan1: Creating new IBSS network, BSSID 22:81:14:b5:c4:7e [ 686.709992][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.165099][T29650] lo speed is unknown, defaulting to 1000 [ 687.341635][T29944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.351317][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.446530][T29952] FAULT_INJECTION: forcing a failure. [ 687.446530][T29952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 687.496580][T29952] CPU: 0 UID: 0 PID: 29952 Comm: syz.3.6828 Not tainted syzkaller #0 PREEMPT(full) [ 687.496603][T29952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 687.496620][T29952] Call Trace: [ 687.496626][T29952] [ 687.496633][T29952] dump_stack_lvl+0xe8/0x150 [ 687.496660][T29952] should_fail_ex+0x412/0x560 [ 687.496687][T29952] _copy_from_user+0x2d/0xb0 [ 687.496705][T29952] do_sock_getsockopt+0x165/0x3f0 [ 687.496726][T29952] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 687.496745][T29952] ? __fget_files+0x3a0/0x420 [ 687.496757][T29952] ? __fget_files+0x2a/0x420 [ 687.496775][T29952] __x64_sys_getsockopt+0x1a4/0x240 [ 687.496799][T29952] do_syscall_64+0x14d/0xf80 [ 687.496817][T29952] ? trace_irq_disable+0x3b/0x150 [ 687.496830][T29952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.496844][T29952] ? clear_bhb_loop+0x40/0x90 [ 687.496860][T29952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.496878][T29952] RIP: 0033:0x7fe241f9c819 [ 687.496893][T29952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.496906][T29952] RSP: 002b:00007fe242dd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 687.496922][T29952] RAX: ffffffffffffffda RBX: 00007fe242215fa0 RCX: 00007fe241f9c819 [ 687.496932][T29952] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 687.496941][T29952] RBP: 00007fe242dd9090 R08: 0000200000000100 R09: 0000000000000000 [ 687.496950][T29952] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 687.496958][T29952] R13: 00007fe242216038 R14: 00007fe242215fa0 R15: 00007ffcd893f708 [ 687.496982][T29952] [ 687.533742][T29960] syzkaller0: entered promiscuous mode [ 687.746626][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.756183][T13607] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 687.767762][T29960] syzkaller0: entered allmulticast mode [ 688.010512][T29976] bridge_slave_1: left allmulticast mode [ 688.027854][T29976] bridge_slave_1: left promiscuous mode [ 688.040878][T29976] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.273746][T29953] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 688.334517][T29976] bridge_slave_0: left allmulticast mode [ 688.475788][T29976] bridge_slave_0: left promiscuous mode [ 688.482063][T29976] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.634947][T10473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.785420][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.888654][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805bf16800: rx timeout, send abort [ 688.908858][T29989] bridge_slave_0: left allmulticast mode [ 688.941146][T29989] bridge_slave_0: left promiscuous mode [ 688.946990][T29989] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.985084][T29989] bridge_slave_1: left allmulticast mode [ 688.993148][T29989] bridge_slave_1: left promiscuous mode [ 688.996830][T29995] __nla_validate_parse: 5 callbacks suppressed [ 688.996849][T29995] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6840'. [ 688.999609][T29989] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.042773][T29989] bond0: (slave bond_slave_0): Releasing backup interface [ 689.063581][T29989] bond0: (slave bond_slave_1): Releasing backup interface [ 689.066476][T29998] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6840'. [ 689.099593][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 689.107853][ C0] lec:lec_tx_timeout: lec0 [ 689.113319][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 689.124666][T29989] team0: Port device team_slave_0 removed [ 689.153776][T29989] team0: Port device team_slave_1 removed [ 689.171898][T29989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 689.181628][T29989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 689.195419][T29989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 689.203603][T29989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 689.215412][T29989] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 689.224896][T30004] FAULT_INJECTION: forcing a failure. [ 689.224896][T30004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 689.248008][T30004] CPU: 1 UID: 0 PID: 30004 Comm: syz.4.6843 Not tainted syzkaller #0 PREEMPT(full) [ 689.248032][T30004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 689.248042][T30004] Call Trace: [ 689.248049][T30004] [ 689.248056][T30004] dump_stack_lvl+0xe8/0x150 [ 689.248083][T30004] should_fail_ex+0x412/0x560 [ 689.248109][T30004] _copy_from_user+0x2d/0xb0 [ 689.248130][T30004] sctp_getsockopt_connectx3+0x165/0x360 [ 689.248154][T30004] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 689.248177][T30004] ? sctp_getsockopt+0x12f/0xb90 [ 689.248199][T30004] ? __local_bh_enable_ip+0xd0/0x130 [ 689.248225][T30004] sctp_getsockopt+0x984/0xb90 [ 689.248245][T30004] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 689.248262][T30004] do_sock_getsockopt+0x2d3/0x3f0 [ 689.248284][T30004] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 689.248302][T30004] ? __fget_files+0x3a0/0x420 [ 689.248315][T30004] ? __fget_files+0x2a/0x420 [ 689.248332][T30004] __x64_sys_getsockopt+0x1a4/0x240 [ 689.248359][T30004] do_syscall_64+0x14d/0xf80 [ 689.248382][T30004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.248399][T30004] ? clear_bhb_loop+0x40/0x90 [ 689.248430][T30004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.248447][T30004] RIP: 0033:0x7fc8ac79c819 [ 689.248465][T30004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.248481][T30004] RSP: 002b:00007fc8ad64b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 689.248501][T30004] RAX: ffffffffffffffda RBX: 00007fc8aca15fa0 RCX: 00007fc8ac79c819 [ 689.248514][T30004] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 689.248526][T30004] RBP: 00007fc8ad64b090 R08: 0000200000000100 R09: 0000000000000000 [ 689.248538][T30004] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 689.248550][T30004] R13: 00007fc8aca16038 R14: 00007fc8aca15fa0 R15: 00007ffe81f9a088 [ 689.248581][T30004] [ 689.453464][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805bf14c00: rx timeout, send abort [ 689.461936][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805bf16800: abort rx timeout. Force session deactivation [ 689.682930][T30019] tipc: Started in network mode [ 689.704273][T30019] tipc: Node identity dad155988cce, cluster identity 4711 [ 689.730720][T30019] tipc: Enabled bearer , priority 0 [ 689.743881][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.764742][T30019] syzkaller0: MTU too low for tipc bearer [ 689.774547][T30019] tipc: Disabling bearer [ 689.820986][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.961948][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805bf14c00: abort rx timeout. Force session deactivation [ 689.988296][T30033] syzkaller0: entered promiscuous mode [ 689.994775][T30033] syzkaller0: entered allmulticast mode [ 690.025843][T30043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6855'. [ 690.246515][T30064] netlink: 'syz.0.6859': attribute type 29 has an invalid length. [ 690.258772][T30064] netlink: 'syz.0.6859': attribute type 29 has an invalid length. [ 690.269183][T30064] netlink: 500 bytes leftover after parsing attributes in process `syz.0.6859'. [ 690.281390][T30068] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6855'. [ 690.462216][T30081] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6865'. [ 690.874445][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.900731][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.862358][T10473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.946086][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.954318][T10473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.016128][T30043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 693.154505][T30084] netlink: 'syz.3.6869': attribute type 4 has an invalid length. [ 693.196108][T30088] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.6867'. [ 693.224404][T30094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6870'. [ 693.253113][T30093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6868'. [ 693.413954][T30103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6872'. [ 693.442834][T30103] netlink: 'syz.3.6872': attribute type 1 has an invalid length. [ 693.812397][T30134] team0: entered promiscuous mode [ 693.817497][T30134] team_slave_0: entered promiscuous mode [ 693.826603][T30134] team_slave_1: entered promiscuous mode [ 693.850846][T30136] netlink: 'syz.4.6883': attribute type 10 has an invalid length. [ 693.859362][T30127] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 693.981211][ T5894] net_ratelimit: 4 callbacks suppressed [ 693.981230][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.119596][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 694.127935][ C0] lec:lec_tx_timeout: lec0 [ 694.132933][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 694.197754][T30153] __nla_validate_parse: 4 callbacks suppressed [ 694.197774][T30153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6888'. [ 694.502755][T30167] netlink: 'syz.3.6893': attribute type 1 has an invalid length. [ 694.579834][T30167] bond2: (slave ip6gretap1): making interface the new active one [ 694.588231][T30167] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 694.598028][T30167] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 694.609001][T30167] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 694.736226][T30186] netlink: 'syz.1.6900': attribute type 39 has an invalid length. [ 694.832143][T30193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6902'. [ 694.845238][T30188] nbd: must specify a size in bytes for the device [ 694.845590][T30190] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 694.904059][T30200] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6903'. [ 695.020493][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.103006][T30211] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6908'. [ 695.248445][T30217] netlink: 'syz.0.6909': attribute type 32 has an invalid length. [ 695.358593][T30227] netlink: 'syz.1.6911': attribute type 1 has an invalid length. [ 695.413524][T30227] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6911'. [ 695.442827][T30237] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6914'. [ 695.472108][T30227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6911'. [ 695.789431][T30251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.798313][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.811257][T30254] xt_TCPMSS: Only works on TCP SYN packets [ 695.905836][T10470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.964250][T30233] syzkaller1: entered promiscuous mode [ 695.982207][T30233] syzkaller1: entered allmulticast mode [ 696.048791][T30266] policy can only be matched on NF_INET_PRE_ROUTING [ 696.048818][T30266] unable to load match [ 696.073743][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.099298][T30266] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6923'. [ 696.688076][T30298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6930'. [ 697.104271][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.647164][T30359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6947'. [ 697.761219][T30364] netlink: 'syz.3.6948': attribute type 10 has an invalid length. [ 697.772738][T30364] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 697.795176][T30364] netlink: 'syz.3.6948': attribute type 10 has an invalid length. [ 698.023728][T30368] syzkaller0: entered promiscuous mode [ 698.076447][T30368] syzkaller0: entered allmulticast mode [ 698.109640][T30364] batadv0: entered promiscuous mode [ 698.114996][T30364] batadv0: entered allmulticast mode [ 698.128627][T30364] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 698.153543][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.749021][T30416] set match dimension is over the limit! [ 699.139921][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 699.148194][ C0] lec:lec_tx_timeout: lec0 [ 699.152868][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 699.194494][ T5901] net_ratelimit: 1 callbacks suppressed [ 699.194514][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.373965][T30453] __nla_validate_parse: 3 callbacks suppressed [ 699.373986][T30453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6965'. [ 699.405764][T30453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6965'. [ 700.232456][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.262716][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.385771][T30416] syzkaller1: entered promiscuous mode [ 701.392192][T30416] syzkaller1: entered allmulticast mode [ 701.702196][T30488] netlink: 440 bytes leftover after parsing attributes in process `syz.0.6969'. [ 701.728882][T30488] openvswitch: netlink: Flow key attr not present in new flow. [ 701.944744][T30505] veth0: entered promiscuous mode [ 701.957817][T30505] syzkaller1: entered promiscuous mode [ 701.969785][T30505] syzkaller1: entered allmulticast mode [ 701.980356][T10473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.120205][T30504] veth0: left promiscuous mode [ 702.205356][T30513] Bluetooth: MGMT ver 1.23 [ 702.231558][T30514] tipc: Enabled bearer , priority 0 [ 702.294955][T30521] syzkaller0: entered promiscuous mode [ 702.312109][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.320407][T30521] syzkaller0: entered allmulticast mode [ 702.439465][T30514] tipc: Resetting bearer [ 702.467099][T30533] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6985'. [ 702.529319][T30511] tipc: Resetting bearer [ 702.626714][T30511] tipc: Disabling bearer [ 702.706546][T30539] team0: Device macvlan3 is already an upper device of the team interface [ 702.947584][T30552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6990'. [ 703.058744][T30559] team0: Device macvlan3 is already an upper device of the team interface [ 703.153861][T30566] Unknown options in mask b7f2 [ 703.180241][T10470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.268514][T30578] netlink: 'syz.0.6999': attribute type 1 has an invalid length. [ 703.344215][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.543794][T30603] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 703.665406][T30613] xt_l2tp: v2 doesn't support IP mode [ 703.673578][T30614] xt_l2tp: v2 doesn't support IP mode [ 703.721979][T30609] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7008'. [ 703.776095][T30611] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7009'. [ 703.781735][T30619] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7012'. [ 703.794949][T30619] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7012'. [ 703.836418][T30611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7009'. [ 703.909366][T30624] netlink: 'syz.3.7014': attribute type 4 has an invalid length. [ 703.924207][T30626] syzkaller0: entered promiscuous mode [ 703.933584][T30626] 0: reclassify loop, rule prio 0, protocol 800 [ 704.056666][T30626] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.117792][T30634] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 704.159934][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 704.168360][ C0] lec:lec_tx_timeout: lec0 [ 704.179651][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 704.250958][T30626] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.254380][T30643] netlink: 'syz.0.7021': attribute type 1 has an invalid length. [ 704.304272][ T51] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 704.311170][ T5833] Bluetooth: hci2: command 0x0401 tx timeout [ 704.357315][T30647] bond3: (slave geneve2): making interface the new active one [ 704.399337][T30647] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 704.477921][T30626] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.521944][T13607] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 704.532734][T30655] : renamed from hsr0 (while UP) [ 704.546865][T13607] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 704.627734][T30626] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.703944][T13607] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 704.728315][T30670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 704.743058][T13607] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 704.755613][T30670] netlink: 'syz.0.7028': attribute type 14 has an invalid length. [ 704.916226][T30673] __nla_validate_parse: 2 callbacks suppressed [ 704.916246][T30673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7027'. [ 705.021629][T10465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.052404][ T9276] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.126012][T13607] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.151770][T13607] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.194537][T30688] netlink: 666 bytes leftover after parsing attributes in process `syz.4.7033'. [ 705.262470][T16748] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.421701][ T9528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.471540][T30702] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7037'. [ 705.675285][T30711] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7040'. [ 705.866700][T30722] ip6gre1: entered promiscuous mode [ 705.872778][T30722] ip6gre1: entered allmulticast mode [ 705.968865][T30729] netlink: 'syz.3.7044': attribute type 11 has an invalid length. [ 705.977518][T30729] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7044'. [ 706.138589][T30681] wg1 speed is unknown, defaulting to 1000 [ 706.231502][T30739] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7046'. [ 706.371945][T30742] tipc: Started in network mode [ 706.377168][T30742] tipc: Node identity 401, cluster identity 4711 [ 706.404888][T30742] tipc: Node number set to 1025 [ 706.479709][ T9528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.591121][T16748] bridge_slave_0: left allmulticast mode [ 706.597472][T16748] bridge_slave_0: left promiscuous mode [ 706.608370][T16748] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.796545][T16748] bond8 (unregistering): (slave ip6gretap1): Releasing active interface [ 706.953212][T16748] gretap0 (unregistering): left promiscuous mode [ 706.975724][T16748] team0: Port device gretap1 removed [ 706.994543][T30763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7051'. [ 707.054493][T16748] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 707.275212][T16748] bond0 (unregistering): left promiscuous mode [ 707.281951][T16748] bond_slave_0: left promiscuous mode [ 707.287526][T16748] bond_slave_1: left promiscuous mode [ 707.293353][T16748] bridge_slave_1: left promiscuous mode [ 707.306777][T16748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 707.318961][T16748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 707.331310][T16748] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 707.346968][T16748] bond0 (unregistering): Released all slaves [ 707.358357][T16748] bond1 (unregistering): Released all slaves [ 707.372045][T16748] bond2 (unregistering): Released all slaves [ 707.385903][T16748] bond3 (unregistering): (slave veth3): Releasing active interface [ 707.398384][T16748] bond3 (unregistering): Released all slaves [ 707.411814][T16748] bond4 (unregistering): Released all slaves [ 707.429250][T16748] bond5 (unregistering): Released all slaves [ 707.446936][T16748] bond6 (unregistering): Released all slaves [ 707.460460][T16748] bond7 (unregistering): Released all slaves [ 707.473244][T16748] bond8 (unregistering): Released all slaves [ 707.486250][T16748] bond9 (unregistering): Released all slaves [ 707.503111][ T9528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.565628][T30681] lo speed is unknown, defaulting to 1000 [ 707.586277][T30680] wg1 speed is unknown, defaulting to 1000 [ 707.653144][T30763] team0 (unregistering): Port device team_slave_0 removed [ 707.717000][T30763] team0 (unregistering): Port device team_slave_1 removed [ 707.730750][T30768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7052'. [ 707.745035][T30768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7052'. [ 707.789024][T30767] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 707.804792][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.814171][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.836608][T30767] bond4 (unregistering): Released all slaves [ 707.898088][T30755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 708.060350][T10465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.193332][T30680] lo speed is unknown, defaulting to 1000 [ 708.377616][ T9276] smc: removing ib device sy‡1 [ 708.540819][ T9528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.737112][T30796] netlink: 'syz.3.7062': attribute type 5 has an invalid length. [ 708.958469][T10470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.033914][T30824] x_tables: duplicate underflow at hook 2 [ 709.189778][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 709.198179][ C0] lec:lec_tx_timeout: lec0 [ 709.203653][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 709.487928][T30833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.527567][T30835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7070'. [ 709.633532][T30833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.931095][T30847] IPVS: set_ctl: invalid protocol: 51 172.20.20.45:20001 [ 709.941832][T30847] vcan0: entered allmulticast mode [ 710.125227][T30857] __nla_validate_parse: 2 callbacks suppressed [ 710.125245][T30857] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7077'. [ 710.219930][ C0] net_ratelimit: 2 callbacks suppressed [ 710.219950][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.612809][T30884] netlink: 'syz.1.7085': attribute type 4 has an invalid length. [ 710.621877][ T9528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.866925][T30890] netlink: 'syz.4.7087': attribute type 15 has an invalid length. [ 710.882221][T30893] netlink: 'syz.2.7088': attribute type 23 has an invalid length. [ 710.894383][T30894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.903758][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.950999][T30893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7088'. [ 710.954715][T30894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.968982][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.985187][T30895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.993965][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.207115][T30903] wg1 speed is unknown, defaulting to 1000 [ 711.268390][T30910] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 711.357211][T30912] syzkaller0: entered promiscuous mode [ 711.382362][T30912] syzkaller0: entered allmulticast mode [ 711.422945][T30912] syzkaller1: entered promiscuous mode [ 711.428584][T30912] syzkaller1: entered allmulticast mode [ 711.660637][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.815660][T30936] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7098'. [ 711.847565][T30936] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7098'. [ 711.960380][T30903] lo speed is unknown, defaulting to 1000 [ 712.121117][T30944] macvtap1: entered promiscuous mode [ 712.137313][T30944] macvtap1: entered allmulticast mode [ 712.165399][T30944] veth1_vlan: entered allmulticast mode [ 712.848237][T16748] : left promiscuous mode [ 713.051681][T16748] tipc: Disabling bearer [ 713.100885][T16748] tipc: Left network mode [ 713.147380][T30966] netlink: 240 bytes leftover after parsing attributes in process `syz.4.7107'. [ 713.361328][T16748] IPVS: stopping master sync thread 19927 ... [ 713.591614][ T5833] Bluetooth: hci2: command 0x0401 tx timeout [ 713.603034][T30969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7108'. [ 713.662558][T30973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7108'. [ 713.724704][T30978] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.7111'. [ 713.834383][T30976] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7108'. [ 714.488978][T30993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7116'. [ 715.095342][T31003] netlink: 'syz.4.7119': attribute type 4 has an invalid length. [ 715.141215][T31003] : renamed from bond0 (while UP) [ 715.339709][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6130 ms [ 715.348295][ C0] lec:lec_tx_timeout: lec0 [ 715.353406][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 715.820666][ T5894] net_ratelimit: 5 callbacks suppressed [ 715.820687][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.198967][T31063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 716.252154][T31064] __nla_validate_parse: 1 callbacks suppressed [ 716.252172][T31064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7131'. [ 716.273105][T31063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7131'. [ 716.282947][T31063] netlink: 'syz.3.7131': attribute type 8 has an invalid length. [ 716.291626][T31064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7131'. [ 716.309474][T31069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.316421][T31064] netlink: 'syz.3.7131': attribute type 8 has an invalid length. [ 716.318458][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.338762][T31069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.348257][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.363954][T31069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.372680][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.382135][T31069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.390325][T31063] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7131'. [ 716.400131][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.450134][T16752] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 716.458165][T31073] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7131'. [ 716.521728][T31078] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7135'. [ 716.527222][T31079] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.7133'. [ 716.563472][T31076] netlink: 'syz.4.7136': attribute type 21 has an invalid length. [ 716.667052][T31076] IPv6: NLM_F_CREATE should be specified when creating new route [ 716.676771][T31076] netlink: 'syz.4.7136': attribute type 1 has an invalid length. [ 716.713802][T31084] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7135'. [ 716.854062][T31077] wg1 speed is unknown, defaulting to 1000 [ 716.928598][T31090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7138'. [ 717.085395][T16748] pim6reg527 (unregistering): left allmulticast mode [ 717.488997][T16748] team0 (unregistering): Port device team_slave_1 removed [ 717.516285][T16748] team0 (unregistering): Port device team_slave_0 removed [ 717.668379][T31077] lo speed is unknown, defaulting to 1000 [ 717.760374][T31106] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7144'. [ 718.045086][T31120] netlink: 'syz.2.7147': attribute type 2 has an invalid length. [ 718.328146][T16752] smc: removing ib device syz0 [ 718.334845][T31134] sctp: [Deprecated]: syz.2.7151 (pid 31134) Use of struct sctp_assoc_value in delayed_ack socket option. [ 718.334845][T31134] Use struct sctp_sack_info instead [ 718.447777][T31137] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 718.514647][T31137] xfrm1: entered allmulticast mode [ 718.543106][T31144] netlink: 'syz.3.7155': attribute type 32 has an invalid length. [ 718.700208][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 718.774659][T31144] bond3: Setting coupled_control to off (0) [ 718.913677][T31147] bond0: entered promiscuous mode [ 718.919123][T31147] bond_slave_0: entered promiscuous mode [ 718.966893][T31147] bond_slave_1: entered promiscuous mode [ 719.038221][T31147] debugfs: 'hsr1' already exists in 'hsr' [ 719.048500][T31147] Cannot create hsr debugfs directory [ 719.055706][T31147] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 719.082327][T31147] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 719.199776][T31147] bond0: left promiscuous mode [ 719.208500][T31147] bond_slave_0: left promiscuous mode [ 719.233267][T31147] bond_slave_1: left promiscuous mode [ 719.604440][T31142] infiniband sy‡1: set active [ 719.613788][T31142] infiniband sy‡1: added bond0 [ 719.671291][T31142] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 719.674916][T31142] infiniband sy‡1: Couldn't open port 1 [ 719.773428][T31201] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 719.883191][T31201] bridge0: port 1(bridge_slave_0) entered learning state [ 719.944926][T31142] RDS/IB: sy‡1: added [ 719.949011][T31142] smc: adding ib device sy‡1 with port count 1 [ 719.976952][T31142] smc: ib device sy‡1 port 1 has no pnetid [ 720.096988][T31209] netlink: 'syz.0.7168': attribute type 17 has an invalid length. [ 720.613325][T31230] mac80211_hwsim hwsim68 ÿ: renamed from wlan1 (while UP) [ 721.099651][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 721.107800][ C0] lec:lec_tx_timeout: lec0 [ 721.114229][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 721.365014][T31271] __nla_validate_parse: 13 callbacks suppressed [ 721.365036][T31271] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7187'. [ 721.929511][T31296] x_tables: duplicate underflow at hook 1 [ 722.201909][T31307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7196'. [ 722.234368][T31307] bridge_slave_1: left allmulticast mode [ 722.250301][T31307] bridge_slave_1: left promiscuous mode [ 722.262685][T31307] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.359748][T31307] bridge_slave_0: left allmulticast mode [ 722.369425][T31307] bridge_slave_0: left promiscuous mode [ 722.410716][T31307] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.795829][T31330] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7200'. [ 722.826486][T31330] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7200'. [ 722.835991][T31330] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7200'. [ 722.877880][T31332] netlink: 'syz.1.7201': attribute type 1 has an invalid length. [ 722.917014][T31332] 8021q: adding VLAN 0 to HW filter on device bond2 [ 722.928414][T31332] bond2: option mode: unable to set because the bond device is up [ 723.120403][T31341] netlink: 'syz.2.7204': attribute type 1 has an invalid length. [ 723.136132][T31341] veth0_to_team: entered allmulticast mode [ 723.304443][T31353] gretap1: entered promiscuous mode [ 723.355149][T31353] batman_adv: batadv0: Adding interface: gretap1 [ 723.368302][T31353] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 723.392104][T31353] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 723.406252][T31355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7207'. [ 723.585180][T31360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7209'. [ 723.638369][T31359] net_ratelimit: 2044 callbacks suppressed [ 723.638390][T31359] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 723.682634][T31359] team0: Mode changed to "random" [ 723.810821][T31359] syzkaller0: entered promiscuous mode [ 723.816532][T31359] syzkaller0: entered allmulticast mode [ 723.872644][T31372] bond1: entered promiscuous mode [ 723.885171][T31375] macvlan3: entered promiscuous mode [ 723.891853][T31375] macvlan3: entered allmulticast mode [ 723.898541][T31375] bond1: (slave macvlan3): Opening slave failed [ 724.142856][T10470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.152019][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.301017][T16747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.345457][T10470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.356456][T10473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.182009][T19624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.129922][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 726.138437][ C0] lec:lec_tx_timeout: lec0 [ 726.144048][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 726.213179][T31378] bond3: option arp_all_targets: invalid value (18446744073709551613) [ 726.222235][T10470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.231652][T19624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.248268][T31378] bond3 (unregistering): Released all slaves [ 726.370369][T31380] rdma_rxe: rxe_newlink: failed to add wg1 [ 726.661572][T31386] netlink: 'syz.3.7216': attribute type 1 has an invalid length. [ 726.669532][T31386] netlink: 'syz.3.7216': attribute type 7 has an invalid length. [ 726.682953][T16748] IPVS: stop unused estimator thread 0... [ 726.698877][T31386] netlink: 'syz.3.7216': attribute type 8 has an invalid length. [ 726.710997][T31386] netlink: 208 bytes leftover after parsing attributes in process `syz.3.7216'. [ 726.758832][T31386] NCSI netlink: No device for ifindex 65584 [ 726.812735][T31399] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 726.845142][T31402] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7221'. [ 726.865128][T10473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.893941][T31402] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.901558][T31402] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.029227][T31415] vcan0: tx address claim with dest, not broadcast [ 727.063036][T31417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7227'. [ 727.112286][T31420] netlink: 'syz.3.7226': attribute type 1 has an invalid length. [ 727.123092][T31420] netlink: 'syz.3.7226': attribute type 1 has an invalid length. [ 727.142535][T31423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7224'. [ 727.207220][T31424] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7226'. [ 727.262073][T31427] netlink: 'syz.1.7228': attribute type 1 has an invalid length. [ 727.264794][T31429] sctp: [Deprecated]: syz.2.7229 (pid 31429) Use of int in max_burst socket option. [ 727.264794][T31429] Use struct sctp_assoc_value instead [ 727.283736][T31427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7228'. [ 727.376585][T31435] netlink: 212356 bytes leftover after parsing attributes in process `syz.0.7224'. [ 727.436221][T31437] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7230'. [ 727.659292][T31448] netlink: 'syz.3.7231': attribute type 16 has an invalid length. [ 727.701985][T31448] netlink: 'syz.3.7231': attribute type 3 has an invalid length. [ 727.721923][T31448] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7231'. [ 728.347933][T31491] FAULT_INJECTION: forcing a failure. [ 728.347933][T31491] name failslab, interval 1, probability 0, space 0, times 0 [ 728.396991][T31491] CPU: 0 UID: 0 PID: 31491 Comm: syz.0.7247 Not tainted syzkaller #0 PREEMPT(full) [ 728.397020][T31491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 728.397031][T31491] Call Trace: [ 728.397040][T31491] [ 728.397048][T31491] dump_stack_lvl+0xe8/0x150 [ 728.397079][T31491] should_fail_ex+0x412/0x560 [ 728.397112][T31491] should_failslab+0xa8/0x100 [ 728.397138][T31491] __kmalloc_cache_noprof+0x88/0x660 [ 728.397158][T31491] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 728.397181][T31491] ? sctp_add_bind_addr+0x8c/0x370 [ 728.397207][T31491] sctp_add_bind_addr+0x8c/0x370 [ 728.397231][T31491] sctp_copy_local_addr_list+0x314/0x4f0 [ 728.397256][T31491] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 728.397277][T31491] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 728.397300][T31491] ? sctp_v6_is_any+0x64/0x80 [ 728.397323][T31491] ? sctp_copy_one_addr+0x93/0x360 [ 728.397347][T31491] sctp_bind_addr_copy+0xb3/0x3c0 [ 728.397369][T31491] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 728.397400][T31491] sctp_connect_new_asoc+0x2ff/0x6b0 [ 728.397428][T31491] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 728.397455][T31491] ? __ipv6_addr_type+0x14d/0x2f0 [ 728.397482][T31491] ? sctp_inet6_send_verify+0x6e/0x300 [ 728.397501][T31491] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 728.397529][T31491] __sctp_connect+0x5cb/0xdc0 [ 728.397563][T31491] ? __pfx___sctp_connect+0x10/0x10 [ 728.397584][T31491] ? security_sctp_bind_connect+0x7e/0x2c0 [ 728.397612][T31491] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 728.397633][T31491] sctp_getsockopt_connectx3+0x227/0x360 [ 728.397666][T31491] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 728.397691][T31491] ? sctp_getsockopt+0x12f/0xb90 [ 728.397716][T31491] ? __local_bh_enable_ip+0xd0/0x130 [ 728.397743][T31491] sctp_getsockopt+0x984/0xb90 [ 728.397768][T31491] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 728.397789][T31491] do_sock_getsockopt+0x2d3/0x3f0 [ 728.397814][T31491] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 728.397838][T31491] ? __fget_files+0x3a0/0x420 [ 728.397855][T31491] ? __fget_files+0x2a/0x420 [ 728.397879][T31491] __x64_sys_getsockopt+0x1a4/0x240 [ 728.397911][T31491] do_syscall_64+0x14d/0xf80 [ 728.397936][T31491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.397954][T31491] ? clear_bhb_loop+0x40/0x90 [ 728.397976][T31491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.397995][T31491] RIP: 0033:0x7ff7c679c819 [ 728.398013][T31491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.398028][T31491] RSP: 002b:00007ff7c7687028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 728.398048][T31491] RAX: ffffffffffffffda RBX: 00007ff7c6a15fa0 RCX: 00007ff7c679c819 [ 728.398062][T31491] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 728.398073][T31491] RBP: 00007ff7c7687090 R08: 0000200000000100 R09: 0000000000000000 [ 728.398086][T31491] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 728.398098][T31491] R13: 00007ff7c6a16038 R14: 00007ff7c6a15fa0 R15: 00007ffc8270a298 [ 728.398130][T31491] [ 728.821956][T31501] netlink: 192 bytes leftover after parsing attributes in process `syz.2.7248'. [ 728.842279][T31505] netlink: 'syz.4.7253': attribute type 10 has an invalid length. [ 728.847459][T31507] netlink: 'syz.0.7251': attribute type 6 has an invalid length. [ 728.947469][T31505] team0 (unregistering): Port device team_slave_0 removed [ 729.045795][T31505] team0 (unregistering): Port device team_slave_1 removed [ 729.133554][T31505] team0 (unregistering): Port device netdevsim0 removed [ 729.207377][T31490] lo speed is unknown, defaulting to 1000 [ 729.247979][T31529] IPv6: sit1: Disabled Multicast RS [ 729.339981][T19624] net_ratelimit: 3 callbacks suppressed [ 729.340000][T19624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.436422][T31512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.545832][T31543] syzkaller0: entered promiscuous mode [ 729.585265][T31543] syzkaller0: entered allmulticast mode [ 730.327714][T31582] FAULT_INJECTION: forcing a failure. [ 730.327714][T31582] name failslab, interval 1, probability 0, space 0, times 0 [ 730.341522][T31582] CPU: 0 UID: 0 PID: 31582 Comm: syz.0.7272 Not tainted syzkaller #0 PREEMPT(full) [ 730.341548][T31582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 730.341558][T31582] Call Trace: [ 730.341566][T31582] [ 730.341574][T31582] dump_stack_lvl+0xe8/0x150 [ 730.341605][T31582] should_fail_ex+0x412/0x560 [ 730.341637][T31582] should_failslab+0xa8/0x100 [ 730.341661][T31582] __kmalloc_cache_noprof+0x88/0x660 [ 730.341682][T31582] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 730.341704][T31582] ? sctp_add_bind_addr+0x8c/0x370 [ 730.341729][T31582] sctp_add_bind_addr+0x8c/0x370 [ 730.341752][T31582] sctp_copy_local_addr_list+0x314/0x4f0 [ 730.341789][T31582] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 730.341810][T31582] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 730.341833][T31582] ? sctp_v6_is_any+0x64/0x80 [ 730.341854][T31582] ? sctp_copy_one_addr+0x93/0x360 [ 730.341876][T31582] sctp_bind_addr_copy+0xb3/0x3c0 [ 730.341898][T31582] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 730.341928][T31582] sctp_connect_new_asoc+0x2ff/0x6b0 [ 730.341952][T31582] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 730.341978][T31582] ? __ipv6_addr_type+0x14d/0x2f0 [ 730.342010][T31582] ? sctp_inet6_send_verify+0x6e/0x300 [ 730.342026][T31582] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 730.342050][T31582] __sctp_connect+0x5cb/0xdc0 [ 730.342080][T31582] ? __pfx___sctp_connect+0x10/0x10 [ 730.342102][T31582] ? security_sctp_bind_connect+0x7e/0x2c0 [ 730.342126][T31582] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 730.342149][T31582] sctp_getsockopt_connectx3+0x227/0x360 [ 730.342174][T31582] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 730.342197][T31582] ? sctp_getsockopt+0x12f/0xb90 [ 730.342221][T31582] ? __local_bh_enable_ip+0xd0/0x130 [ 730.342249][T31582] sctp_getsockopt+0x984/0xb90 [ 730.342270][T31582] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 730.342291][T31582] do_sock_getsockopt+0x2d3/0x3f0 [ 730.342317][T31582] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 730.342341][T31582] ? __fget_files+0x3a0/0x420 [ 730.342357][T31582] ? __fget_files+0x2a/0x420 [ 730.342380][T31582] __x64_sys_getsockopt+0x1a4/0x240 [ 730.342412][T31582] do_syscall_64+0x14d/0xf80 [ 730.342436][T31582] ? trace_irq_disable+0x3b/0x150 [ 730.342452][T31582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.342471][T31582] ? clear_bhb_loop+0x40/0x90 [ 730.342492][T31582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.342510][T31582] RIP: 0033:0x7ff7c679c819 [ 730.342528][T31582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.342544][T31582] RSP: 002b:00007ff7c7687028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 730.342565][T31582] RAX: ffffffffffffffda RBX: 00007ff7c6a15fa0 RCX: 00007ff7c679c819 [ 730.342579][T31582] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 730.342591][T31582] RBP: 00007ff7c7687090 R08: 0000200000000100 R09: 0000000000000000 [ 730.342603][T31582] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 730.342615][T31582] R13: 00007ff7c6a16038 R14: 00007ff7c6a15fa0 R15: 00007ffc8270a298 [ 730.342645][T31582] [ 730.665034][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.673383][T10470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.877216][T10470] IPVS: starting estimator thread 0... [ 730.877633][T31595] IPVS: ip_vs_add_dest(): server weight less than zero [ 731.086110][T31596] IPVS: using max 26 ests per chain, 62400 per kthread [ 731.159639][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 731.167738][ C0] lec:lec_tx_timeout: lec0 [ 731.179891][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 731.459005][T31624] FAULT_INJECTION: forcing a failure. [ 731.459005][T31624] name failslab, interval 1, probability 0, space 0, times 0 [ 731.510375][T31624] CPU: 1 UID: 0 PID: 31624 Comm: syz.3.7283 Not tainted syzkaller #0 PREEMPT(full) [ 731.510404][T31624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 731.510416][T31624] Call Trace: [ 731.510424][T31624] [ 731.510433][T31624] dump_stack_lvl+0xe8/0x150 [ 731.510468][T31624] should_fail_ex+0x412/0x560 [ 731.510501][T31624] should_failslab+0xa8/0x100 [ 731.510526][T31624] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 731.510550][T31624] ? __alloc_skb+0x1d0/0x7d0 [ 731.510571][T31624] ? __local_bh_enable_ip+0xd0/0x130 [ 731.510599][T31624] __alloc_skb+0x1d0/0x7d0 [ 731.510626][T31624] ? kasan_save_track+0x4f/0x80 [ 731.510650][T31624] _sctp_make_chunk+0x59/0x290 [ 731.510677][T31624] sctp_make_init+0x5e3/0xe00 [ 731.510695][T31624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.510727][T31624] ? __pfx_sctp_make_init+0x10/0x10 [ 731.510769][T31624] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 731.510800][T31624] sctp_do_sm+0x238/0x5cf0 [ 731.510817][T31624] ? __pfx_sctp_pname+0x10/0x10 [ 731.510834][T31624] ? kmem_cache_alloc_noprof+0x307/0x650 [ 731.510863][T31624] ? radix_tree_node_alloc+0xbc/0x3a0 [ 731.510889][T31624] ? __pfx_sctp_do_sm+0x10/0x10 [ 731.510909][T31624] ? idr_get_free+0x8dc/0xa70 [ 731.510973][T31624] ? sctp_assoc_set_id+0x1b3/0x350 [ 731.511000][T31624] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 731.511030][T31624] __sctp_connect+0x911/0xdc0 [ 731.511067][T31624] ? __pfx___sctp_connect+0x10/0x10 [ 731.511087][T31624] ? security_sctp_bind_connect+0x7e/0x2c0 [ 731.511111][T31624] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 731.511133][T31624] sctp_getsockopt_connectx3+0x227/0x360 [ 731.511157][T31624] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 731.511181][T31624] ? sctp_getsockopt+0x12f/0xb90 [ 731.511207][T31624] ? __local_bh_enable_ip+0xd0/0x130 [ 731.511234][T31624] sctp_getsockopt+0x984/0xb90 [ 731.511257][T31624] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 731.511280][T31624] do_sock_getsockopt+0x2d3/0x3f0 [ 731.511307][T31624] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 731.511331][T31624] ? __fget_files+0x3a0/0x420 [ 731.511348][T31624] ? __fget_files+0x2a/0x420 [ 731.511373][T31624] __x64_sys_getsockopt+0x1a4/0x240 [ 731.511406][T31624] do_syscall_64+0x14d/0xf80 [ 731.511430][T31624] ? trace_irq_disable+0x3b/0x150 [ 731.511446][T31624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.511465][T31624] ? clear_bhb_loop+0x40/0x90 [ 731.511488][T31624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.511506][T31624] RIP: 0033:0x7fe241f9c819 [ 731.511525][T31624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.511542][T31624] RSP: 002b:00007fe242dd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 731.511562][T31624] RAX: ffffffffffffffda RBX: 00007fe242215fa0 RCX: 00007fe241f9c819 [ 731.511576][T31624] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 731.511588][T31624] RBP: 00007fe242dd9090 R08: 0000200000000100 R09: 0000000000000000 [ 731.511601][T31624] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 731.511618][T31624] R13: 00007fe242216038 R14: 00007fe242215fa0 R15: 00007ffcd893f708 [ 731.511650][T31624] [ 731.911995][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.976147][T31632] __nla_validate_parse: 4 callbacks suppressed [ 731.976167][T31632] netlink: 45 bytes leftover after parsing attributes in process `syz.4.7287'. [ 732.137842][T31639] gretap2: entered promiscuous mode [ 732.178151][T31639] batman_adv: batadv0: Adding interface: gretap2 [ 732.201419][T31639] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 732.269250][T31639] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 732.313631][T31645] tipc: Started in network mode [ 732.318780][T31645] tipc: Node identity 1652653b203e, cluster identity 4711 [ 732.327733][T31653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7294'. [ 732.328018][T31645] tipc: Enabled bearer , priority 0 [ 732.353208][T31653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7294'. [ 732.361326][T31656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.371724][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.383832][T31658] FAULT_INJECTION: forcing a failure. [ 732.383832][T31658] name failslab, interval 1, probability 0, space 0, times 0 [ 732.399144][T31658] CPU: 1 UID: 0 PID: 31658 Comm: syz.2.7296 Not tainted syzkaller #0 PREEMPT(full) [ 732.399170][T31658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 732.399182][T31658] Call Trace: [ 732.399189][T31658] [ 732.399198][T31658] dump_stack_lvl+0xe8/0x150 [ 732.399226][T31658] should_fail_ex+0x412/0x560 [ 732.399255][T31658] should_failslab+0xa8/0x100 [ 732.399277][T31658] ? sctp_chunkify+0x5a/0x260 [ 732.399296][T31658] kmem_cache_alloc_noprof+0x87/0x650 [ 732.399324][T31658] sctp_chunkify+0x5a/0x260 [ 732.399348][T31658] _sctp_make_chunk+0x122/0x290 [ 732.399372][T31658] sctp_make_init+0x5e3/0xe00 [ 732.399390][T31658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.399421][T31658] ? __pfx_sctp_make_init+0x10/0x10 [ 732.399459][T31658] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 732.399489][T31658] sctp_do_sm+0x238/0x5cf0 [ 732.399506][T31658] ? __pfx_sctp_pname+0x10/0x10 [ 732.399523][T31658] ? kmem_cache_alloc_noprof+0x307/0x650 [ 732.399559][T31658] ? radix_tree_node_alloc+0xbc/0x3a0 [ 732.399581][T31658] ? __pfx_sctp_do_sm+0x10/0x10 [ 732.399598][T31658] ? idr_get_free+0x8dc/0xa70 [ 732.399655][T31658] ? sctp_assoc_set_id+0x1b3/0x350 [ 732.399680][T31658] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 732.399710][T31658] __sctp_connect+0x911/0xdc0 [ 732.399746][T31658] ? __pfx___sctp_connect+0x10/0x10 [ 732.399770][T31658] ? security_sctp_bind_connect+0x7e/0x2c0 [ 732.399797][T31658] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 732.399819][T31658] sctp_getsockopt_connectx3+0x227/0x360 [ 732.399843][T31658] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 732.399869][T31658] ? sctp_getsockopt+0x12f/0xb90 [ 732.399895][T31658] ? __local_bh_enable_ip+0xd0/0x130 [ 732.399923][T31658] sctp_getsockopt+0x984/0xb90 [ 732.399943][T31658] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 732.399967][T31658] do_sock_getsockopt+0x2d3/0x3f0 [ 732.399992][T31658] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 732.400014][T31658] ? __fget_files+0x3a0/0x420 [ 732.400030][T31658] ? __fget_files+0x2a/0x420 [ 732.400052][T31658] __x64_sys_getsockopt+0x1a4/0x240 [ 732.400083][T31658] do_syscall_64+0x14d/0xf80 [ 732.400105][T31658] ? trace_irq_disable+0x3b/0x150 [ 732.400121][T31658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.400139][T31658] ? clear_bhb_loop+0x40/0x90 [ 732.400161][T31658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.400177][T31658] RIP: 0033:0x7f5a6ff9c819 [ 732.400195][T31658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.400212][T31658] RSP: 002b:00007f5a70dc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 732.400232][T31658] RAX: ffffffffffffffda RBX: 00007f5a70215fa0 RCX: 00007f5a6ff9c819 [ 732.400246][T31658] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 732.400258][T31658] RBP: 00007f5a70dc1090 R08: 0000200000000100 R09: 0000000000000000 [ 732.400271][T31658] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 732.400283][T31658] R13: 00007f5a70216038 R14: 00007f5a70215fa0 R15: 00007ffedcbcdf08 [ 732.400314][T31658] [ 732.753801][T31651] syzkaller0: entered promiscuous mode [ 732.760197][T31651] syzkaller0: entered allmulticast mode [ 732.767246][T31651] tipc: Resetting bearer [ 732.837570][T31640] tipc: Resetting bearer [ 732.940663][T19624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.047594][T31677] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 733.055364][T31677] IPv6: NLM_F_CREATE should be set when creating new route [ 733.064665][T31677] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7301'. [ 733.746653][T10465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.991024][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.028333][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.222624][T31640] tipc: Disabling bearer [ 735.325523][T10473] tipc: Node number set to 913073467 [ 735.338961][T31665] lo speed is unknown, defaulting to 1000 [ 735.526111][T31692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7304'. [ 735.783982][T31702] netlink: 'syz.1.7305': attribute type 1 has an invalid length. [ 735.808820][T31702] netlink: 'syz.1.7305': attribute type 3 has an invalid length. [ 735.831787][T31702] netlink: 212 bytes leftover after parsing attributes in process `syz.1.7305'. [ 736.053990][T31711] FAULT_INJECTION: forcing a failure. [ 736.053990][T31711] name failslab, interval 1, probability 0, space 0, times 0 [ 736.070679][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.090455][T31709] "syz.1.7307" (31709) uses obsolete ecb(arc4) skcipher [ 736.096629][T31711] CPU: 0 UID: 0 PID: 31711 Comm: syz.2.7308 Not tainted syzkaller #0 PREEMPT(full) [ 736.096656][T31711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 736.096668][T31711] Call Trace: [ 736.096675][T31711] [ 736.096683][T31711] dump_stack_lvl+0xe8/0x150 [ 736.096714][T31711] should_fail_ex+0x412/0x560 [ 736.096746][T31711] should_failslab+0xa8/0x100 [ 736.096770][T31711] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 736.096794][T31711] ? __alloc_skb+0x1d0/0x7d0 [ 736.096813][T31711] ? __local_bh_enable_ip+0xd0/0x130 [ 736.096841][T31711] __alloc_skb+0x1d0/0x7d0 [ 736.096866][T31711] sctp_packet_transmit+0x290/0x2ac0 [ 736.096896][T31711] ? __sctp_packet_append_chunk+0x912/0xd00 [ 736.096933][T31711] ? sctp_packet_append_chunk+0x9b4/0x1010 [ 736.096965][T31711] sctp_packet_singleton+0x234/0x340 [ 736.096986][T31711] ? __pfx_sctp_packet_singleton+0x10/0x10 [ 736.097014][T31711] ? sctp_outq_select_transport+0x462/0x570 [ 736.097033][T31711] ? sctp_transport_burst_limited+0x19c/0x280 [ 736.097060][T31711] sctp_outq_flush+0x50d/0x31b0 [ 736.097100][T31711] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 736.097125][T31711] ? __pfx_sctp_outq_flush+0x10/0x10 [ 736.097163][T31711] ? sctp_outq_tail+0x612/0x920 [ 736.097188][T31711] ? sctp_outq_uncork+0x4d/0xa0 [ 736.097216][T31711] sctp_do_sm+0x54c7/0x5cf0 [ 736.097249][T31711] ? __pfx_sctp_do_sm+0x10/0x10 [ 736.097267][T31711] ? idr_get_free+0x8dc/0xa70 [ 736.097327][T31711] ? sctp_assoc_set_id+0x1b3/0x350 [ 736.097354][T31711] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 736.097382][T31711] __sctp_connect+0x911/0xdc0 [ 736.097417][T31711] ? __pfx___sctp_connect+0x10/0x10 [ 736.097440][T31711] ? security_sctp_bind_connect+0x7e/0x2c0 [ 736.097465][T31711] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 736.097487][T31711] sctp_getsockopt_connectx3+0x227/0x360 [ 736.097510][T31711] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 736.097535][T31711] ? sctp_getsockopt+0x12f/0xb90 [ 736.097559][T31711] ? __local_bh_enable_ip+0xd0/0x130 [ 736.097585][T31711] sctp_getsockopt+0x984/0xb90 [ 736.097605][T31711] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 736.097624][T31711] do_sock_getsockopt+0x2d3/0x3f0 [ 736.097653][T31711] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 736.097677][T31711] ? __fget_files+0x3a0/0x420 [ 736.097693][T31711] ? __fget_files+0x2a/0x420 [ 736.097715][T31711] __x64_sys_getsockopt+0x1a4/0x240 [ 736.097747][T31711] do_syscall_64+0x14d/0xf80 [ 736.097770][T31711] ? trace_irq_disable+0x3b/0x150 [ 736.097785][T31711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.097803][T31711] ? clear_bhb_loop+0x40/0x90 [ 736.097825][T31711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.097843][T31711] RIP: 0033:0x7f5a6ff9c819 [ 736.097861][T31711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.097876][T31711] RSP: 002b:00007f5a70dc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 736.097896][T31711] RAX: ffffffffffffffda RBX: 00007f5a70215fa0 RCX: 00007f5a6ff9c819 [ 736.097909][T31711] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 736.097919][T31711] RBP: 00007f5a70dc1090 R08: 0000200000000100 R09: 0000000000000000 [ 736.097931][T31711] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 736.097943][T31711] R13: 00007f5a70216038 R14: 00007f5a70215fa0 R15: 00007ffedcbcdf08 [ 736.097973][T31711] [ 736.189726][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 736.413660][T31717] netlink: 'syz.0.7310': attribute type 1 has an invalid length. [ 736.417964][ C0] lec:lec_tx_timeout: lec0 [ 736.420138][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 736.480677][T10473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.530252][T31717] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7310'. [ 736.549816][T31717] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7310'. [ 736.602750][T31717] netlink: 658 bytes leftover after parsing attributes in process `syz.0.7310'. [ 736.781003][T10465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.877517][T31740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7313'. [ 737.124260][T31740] bond5: Invalid ad_actor_system MAC address. [ 737.132496][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.144509][T31740] bond5: option ad_actor_system: invalid value (1) [ 737.177331][T31740] bond5 (unregistering): Released all slaves [ 737.236616][T31755] ipt_REJECT: TCP_RESET invalid for non-tcp [ 737.409112][T31760] syzkaller0: entered promiscuous mode [ 737.420757][T31760] syzkaller0: entered allmulticast mode [ 737.606704][T31775] netlink: 'syz.3.7321': attribute type 9 has an invalid length. [ 737.659205][T31778] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 738.157944][T19624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.262703][T31811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 738.316544][T31815] netlink: 'syz.1.7331': attribute type 1 has an invalid length. [ 738.432890][T31815] bond3: entered promiscuous mode [ 738.440830][T31815] 8021q: adding VLAN 0 to HW filter on device bond3 [ 738.458601][T31815] netlink: 'syz.1.7331': attribute type 1 has an invalid length. [ 738.514799][T31815] netlink: 'syz.1.7331': attribute type 1 has an invalid length. [ 738.527457][T31815] netlink: 'syz.1.7331': attribute type 1 has an invalid length. [ 738.536208][T31815] netlink: 'syz.1.7331': attribute type 1 has an invalid length. [ 738.547305][T31815] netlink: 'syz.1.7331': attribute type 1 has an invalid length. [ 738.555947][T31824] syzkaller0: entered promiscuous mode [ 738.570149][T31824] syzkaller0: entered allmulticast mode [ 739.043046][T31857] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7340'. [ 739.192476][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.267543][T31863] veth0_vlan: left promiscuous mode [ 739.283924][T31873] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7342'. [ 739.330442][T31863] veth0_vlan: entered promiscuous mode [ 739.369322][T31863] team0: Device veth0_vlan failed to register rx_handler [ 739.447557][T31880] gre2: entered promiscuous mode [ 739.505855][T31886] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7347'. [ 739.542375][T31886] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.550014][T31886] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.820039][T10473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.985215][T31909] bond2: option lp_interval: invalid value (0) [ 740.022534][T31909] bond2: option lp_interval: allowed values 1 - 2147483647 [ 740.044560][T31909] bond2 (unregistering): Released all slaves [ 740.088893][T31911] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7355'. [ 740.231981][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.263742][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.175315][T31866] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 742.220370][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 742.228418][ C0] lec:lec_tx_timeout: lec0 [ 742.234272][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 742.300540][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.390174][T31949] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7359'. [ 742.451118][T31957] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7358'. [ 742.533905][T31960] xt_policy: too many policy elements [ 742.564780][T31961] xt_policy: too many policy elements [ 742.599500][T31967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.728851][T31975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7367'. [ 742.869212][T10465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.896706][T31986] validate_nla: 29 callbacks suppressed [ 742.896725][T31986] netlink: 'syz.0.7372': attribute type 1 has an invalid length. [ 743.070344][T32002] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7377'. [ 743.200154][T32012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7379'. [ 743.245779][T32015] netlink: 'syz.4.7380': attribute type 8 has an invalid length. [ 743.269343][T32016] netlink: 'syz.1.7379': attribute type 12 has an invalid length. [ 743.316363][T32018] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7381'. [ 743.334752][T32016] bond4: option primary_reselect: invalid value (255) [ 743.350566][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.379167][T32016] bond4 (unregistering): Released all slaves [ 743.492779][T32029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 743.547209][T32029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 743.724816][T32042] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20000 [ 743.756633][T32049] netlink: 'syz.4.7391': attribute type 2 has an invalid length. [ 743.770616][T32042] syzkaller0: entered promiscuous mode [ 743.797891][T32042] syzkaller0: entered allmulticast mode [ 743.807504][T32042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.816981][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.831275][T32049] netlink: 'syz.4.7391': attribute type 2 has an invalid length. [ 743.857461][T32049] netlink: 'syz.4.7391': attribute type 2 has an invalid length. [ 743.891879][T32049] netlink: 'syz.4.7391': attribute type 2 has an invalid length. [ 743.907660][T32049] netlink: 'syz.4.7391': attribute type 2 has an invalid length. [ 743.917764][T32049] netlink: 'syz.4.7391': attribute type 2 has an invalid length. [ 743.926582][T32049] netlink: 'syz.4.7391': attribute type 2 has an invalid length. [ 744.172683][T32074] __nla_validate_parse: 1 callbacks suppressed [ 744.172701][T32074] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7397'. [ 744.233104][T32076] bond4: option all_slaves_active: invalid value (222) [ 744.272525][T32076] bond4 (unregistering): Released all slaves [ 744.439458][T32090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7400'. [ 744.903726][T32133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7412'. [ 744.928637][T32133] bond0: entered promiscuous mode [ 744.938376][T32133] gretap0: entered promiscuous mode [ 744.952757][T32133] ip6gretap0: entered promiscuous mode [ 744.962129][T32133] debugfs: 'hsr1' already exists in 'hsr' [ 744.968257][T32133] Cannot create hsr debugfs directory [ 744.990453][T32133] hsr1: entered promiscuous mode [ 745.058570][T32142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.193776][T32151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7418'. [ 745.284423][T32155] veth5: entered allmulticast mode [ 745.329440][T32157] bond2: option min_links: invalid value (18446744073709551614) [ 745.337589][T32157] bond2: option min_links: allowed values 0 - 2147483647 [ 745.348070][T32157] bond2 (unregistering): Released all slaves [ 745.388463][T32160] syzkaller0: entered promiscuous mode [ 745.394908][T32160] syzkaller0: entered allmulticast mode [ 745.405232][T32166] syzkaller0: entered promiscuous mode [ 745.414553][T32166] syzkaller0: entered allmulticast mode [ 745.430888][ T5894] net_ratelimit: 3 callbacks suppressed [ 745.430907][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.731048][T32173] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7426'. [ 745.767062][T32175] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7427'. [ 745.901369][T10454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.062122][T10454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.473174][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.654533][T32217] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7437'. [ 746.686621][T32215] syzkaller0: entered promiscuous mode [ 746.693398][T32215] syzkaller0: entered allmulticast mode [ 746.710921][T32222] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7439'. [ 746.749128][T32224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7441'. [ 746.788924][T32224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7441'. [ 746.794097][T32227] veth0_to_batadv: mtu less than device minimum [ 746.805925][T30925] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.818373][T30925] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.835996][T32226] veth0_to_batadv: mtu less than device minimum [ 746.845165][ T49] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.868910][ T49] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.145421][ T49] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.168272][ T49] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.256102][ T49] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.285610][ T49] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.314721][T32262] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 747.543905][T32269] 8021q: adding VLAN 0 to HW filter on device bond7 [ 747.594032][T32269] bond6: (slave bond7): making interface the new active one [ 747.605526][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.611805][T32269] bond6: (slave bond7): Enslaving as an active interface with an up link [ 747.724131][T32264] bond6: (slave gretap1): Enslaving as a backup interface with an up link [ 747.765208][T32276] 8021q: adding VLAN 0 to HW filter on device bond6 [ 747.979646][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 747.988032][ C0] lec:lec_tx_timeout: lec0 [ 747.994335][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 748.439508][T32315] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 748.620933][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.636500][T32326] validate_nla: 127 callbacks suppressed [ 748.636536][T32326] netlink: 'syz.3.7471': attribute type 1 has an invalid length. [ 748.736322][T32326] 8021q: adding VLAN 0 to HW filter on device bond4 [ 748.757460][T32329] bond4: entered promiscuous mode [ 748.763315][T32329] bond4: entered allmulticast mode [ 748.902523][T32348] IPVS: set_ctl: invalid protocol: 51 172.30.1.2:20004 [ 748.940351][T10473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.197617][T32366] __nla_validate_parse: 15 callbacks suppressed [ 749.197639][T32366] netlink: 7 bytes leftover after parsing attributes in process `syz.1.7484'. [ 749.292508][T32363] syzkaller0: entered promiscuous mode [ 749.306552][T32363] syzkaller0: entered allmulticast mode [ 749.446628][T32377] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7489'. [ 749.812289][T32382] syzkaller1: entered promiscuous mode [ 749.818164][T32382] syzkaller1: entered allmulticast mode [ 750.237052][T32394] netlink: 'syz.3.7495': attribute type 12 has an invalid length. [ 750.661186][T32432] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7506'. [ 750.701400][T32433] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7508'. [ 750.711261][T19624] net_ratelimit: 1 callbacks suppressed [ 750.711281][T19624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.755310][T32436] pim6reg527: entered allmulticast mode [ 750.767618][T32438] xt_CT: You must specify a L4 protocol and not use inversions on it [ 750.788622][T32433] syzkaller1: entered promiscuous mode [ 750.814560][T32433] syzkaller1: entered allmulticast mode [ 751.038899][T32456] xt_ecn: cannot match TCP bits for non-tcp packets [ 751.135916][T32405] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 751.156006][T32463] syzkaller0: entered promiscuous mode [ 751.170140][T32463] syzkaller0: entered allmulticast mode [ 751.510351][T32495] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7527'. [ 751.528206][T32495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7527'. [ 751.606119][T32504] netlink: 100 bytes leftover after parsing attributes in process `syz.3.7529'. [ 751.648910][T32501] tipc: Cannot configure node identity twice [ 751.658840][T32501] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7529'. [ 751.734438][T32512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.756895][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.918045][T32524] netlink: 112 bytes leftover after parsing attributes in process `syz.0.7534'. [ 751.920526][T32523] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7533'. [ 751.950688][T32523] nbd: must specify at least one socket [ 751.982545][T10454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.007570][T32526] openvswitch: netlink: Missing key (keys=40, expected=100) [ 752.165171][T32530] netlink: 'syz.3.7536': attribute type 11 has an invalid length. [ 752.481399][T32554] syzkaller1: entered promiscuous mode [ 752.506139][T32554] syzkaller1: entered allmulticast mode [ 752.790811][T19624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.935243][T32579] netlink: 'syz.2.7552': attribute type 1 has an invalid length. [ 753.019945][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 753.028298][ C0] lec:lec_tx_timeout: lec0 [ 753.033871][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 753.091787][T32594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.117324][T32581] lo speed is unknown, defaulting to 1000 [ 753.191296][T32600] netlink: 'syz.3.7556': attribute type 1 has an invalid length. [ 753.215090][T32602] netlink: 'syz.4.7557': attribute type 21 has an invalid length. [ 753.223534][T32603] netlink: 'syz.4.7557': attribute type 21 has an invalid length. [ 753.501798][T32625] netlink: 'syz.3.7562': attribute type 4 has an invalid length. [ 753.528566][T32625] netlink: 'syz.3.7562': attribute type 4 has an invalid length. [ 753.605748][T32632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 753.802114][T32635] lo speed is unknown, defaulting to 1000 [ 753.835343][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.842839][T32642] netlink: 'syz.2.7568': attribute type 1 has an invalid length. [ 753.874867][T32642] netlink: 'syz.2.7568': attribute type 2 has an invalid length. [ 754.149023][T32652] netlink: 'syz.2.7572': attribute type 1 has an invalid length. [ 754.221651][T32658] __nla_validate_parse: 17 callbacks suppressed [ 754.221672][T32658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7574'. [ 754.275263][T32657] bond2: (slave bridge1): making interface the new active one [ 754.330088][T32657] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 754.586150][T32672] netlink: 'syz.0.7579': attribute type 1 has an invalid length. [ 754.695401][T32672] bond8: entered promiscuous mode [ 754.714541][T32679] netlink: 'syz.2.7580': attribute type 17 has an invalid length. [ 754.720276][T32672] 8021q: adding VLAN 0 to HW filter on device bond8 [ 754.729126][T32679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7580'. [ 754.738729][T32679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7580'. [ 754.804693][T32682] 8021q: adding VLAN 0 to HW filter on device bond8 [ 754.813197][T32682] bond8: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 754.858616][T32682] bond8: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 754.871091][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.893369][T32682] bond8: (slave ip6gre1): making interface the new active one [ 754.901721][T32682] ip6gre1: entered promiscuous mode [ 754.908117][T32682] bond8: (slave ip6gre1): Enslaving as an active interface with an up link [ 754.929202][T32679] gretap0: entered promiscuous mode [ 754.937232][T32679] gretap0: left promiscuous mode [ 755.365713][T32699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7585'. [ 755.842997][T32713] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7589'. [ 755.853795][T32716] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7591'. [ 755.905408][ T5901] net_ratelimit: 2 callbacks suppressed [ 755.905427][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.407765][T32751] netlink: 'syz.3.7600': attribute type 1 has an invalid length. [ 756.432891][T32751] netlink: 'syz.3.7600': attribute type 1 has an invalid length. [ 756.451163][T32751] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.7600'. [ 756.485576][T32752] syzkaller1: entered promiscuous mode [ 756.499038][T32752] syzkaller1: entered allmulticast mode [ 756.825854][ T308] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 756.946554][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.053592][ T324] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7609'. [ 757.116177][ T327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.125298][ T327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.148033][ T327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.160066][ T334] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7612'. [ 757.176641][ T327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.304289][ T339] lo speed is unknown, defaulting to 1000 [ 757.317496][ T344] Bluetooth: MGMT ver 1.23 [ 757.784083][ T364] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7618'. [ 757.869654][ T364] netlink: 'syz.0.7618': attribute type 3 has an invalid length. [ 757.877640][ T364] netlink: 'syz.0.7618': attribute type 2 has an invalid length. [ 757.981213][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.049598][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 758.058028][ C0] lec:lec_tx_timeout: lec0 [ 758.063682][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 758.130079][T10454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.246290][ T388] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 758.600698][ T402] syzkaller1: entered promiscuous mode [ 758.606729][ T402] syzkaller1: entered allmulticast mode [ 758.608324][ T410] Cannot find add_set index 2 as target [ 759.030825][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.092977][ T429] netlink: 'syz.4.7638': attribute type 9 has an invalid length. [ 759.193929][ T435] netlink: 'syz.0.7640': attribute type 12 has an invalid length. [ 759.271235][ T439] netlink: 'syz.1.7642': attribute type 10 has an invalid length. [ 759.433403][ T439] veth0_macvtap: left promiscuous mode [ 759.519079][ T454] __nla_validate_parse: 9 callbacks suppressed [ 759.519099][ T454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7644'. [ 759.702269][ T463] syzkaller1: entered promiscuous mode [ 759.708073][ T463] syzkaller1: entered allmulticast mode [ 759.729939][ T463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7646'. [ 759.826686][ T467] bond5: (slave gre0): Device is not bonding slave [ 759.833628][ T467] bond5: option active_slave: invalid value (gre0) [ 759.842986][ T467] bond5 (unregistering): Released all slaves [ 759.973533][ T482] sctp: [Deprecated]: syz.4.7652 (pid 482) Use of int in max_burst socket option. [ 759.973533][ T482] Use struct sctp_assoc_value instead [ 760.090393][ T489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7655'. [ 760.099910][ T489] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7655'. [ 760.110887][ T489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7655'. [ 760.129968][ T489] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7655'. [ 760.212258][ T494] netlink: 'syz.1.7656': attribute type 1 has an invalid length. [ 760.244259][ T494] netlink: 'syz.1.7656': attribute type 2 has an invalid length. [ 760.267567][ T494] netlink: 'syz.1.7656': attribute type 1 has an invalid length. [ 760.398070][ T496] erspan0: entered promiscuous mode [ 760.415131][ T496] erspan0: entered allmulticast mode [ 760.567582][ T518] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 760.764318][ T524] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7666'. [ 760.951239][ T539] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7667'. [ 761.114126][ T5894] net_ratelimit: 11 callbacks suppressed [ 761.114146][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.184614][T10454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.656768][ T582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7682'. [ 761.666274][ T587] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7682'. [ 761.692284][ T582] netlink: 'syz.2.7682': attribute type 5 has an invalid length. [ 761.777986][ T582] geneve3: entered promiscuous mode [ 761.825059][ T582] geneve3: entered allmulticast mode [ 761.843782][T30925] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 761.874881][T30925] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 761.911406][T16748] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 761.976646][T16748] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 762.140638][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.407627][ T632] ip6gre1: entered allmulticast mode [ 762.417617][ T630] lo speed is unknown, defaulting to 1000 [ 762.688114][ T640] vlan3: entered allmulticast mode [ 762.695580][ T640] bond0: entered allmulticast mode [ 762.717366][ T640] bond_slave_0: entered allmulticast mode [ 762.724531][ T640] bond_slave_1: entered allmulticast mode [ 763.079883][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 763.088206][ C0] lec:lec_tx_timeout: lec0 [ 763.093145][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 763.173229][ T668] 8021q: adding VLAN 0 to HW filter on device bond4 [ 763.188556][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.399123][ T693] SET target dimension over the limit! [ 763.513527][ T696] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 763.746884][ T706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.756746][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.816693][ T714] netlink: 'syz.3.7715': attribute type 1 has an invalid length. [ 763.930657][ T718] netlink: 'syz.3.7717': attribute type 64 has an invalid length. [ 764.056558][ T724] netlink: 'syz.1.7718': attribute type 21 has an invalid length. [ 764.067919][ T724] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 764.225891][T10454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.234468][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.024262][ T770] validate_nla: 1 callbacks suppressed [ 765.024281][ T770] netlink: 'syz.4.7729': attribute type 1 has an invalid length. [ 765.053981][ T767] netlink: 'syz.3.7727': attribute type 1 has an invalid length. [ 765.126789][ T767] bond5: entered promiscuous mode [ 765.135240][ T767] 8021q: adding VLAN 0 to HW filter on device bond5 [ 765.143847][ T773] __nla_validate_parse: 10 callbacks suppressed [ 765.143866][ T773] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7730'. [ 766.121051][ T804] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7736'. [ 766.131345][ T804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7736'. [ 766.310469][ T5901] net_ratelimit: 2 callbacks suppressed [ 766.310490][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.260789][T10473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.344831][ T743] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 767.354471][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.581100][ T819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.819065][ T833] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7744'. [ 767.830289][T10465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.864937][ T832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7744'. [ 768.099913][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 768.108061][ C0] lec:lec_tx_timeout: lec0 [ 768.115117][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 768.167693][ T869] openvswitch: netlink: IP tunnel dst address not specified [ 768.182872][ T867] netlink: 'syz.3.7753': attribute type 10 has an invalid length. [ 768.199351][ T867] batadv0: left promiscuous mode [ 768.211531][ T867] batadv0: left allmulticast mode [ 768.217091][ T867] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 768.310404][ T874] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 768.342740][ T881] netlink: 'syz.4.7757': attribute type 1 has an invalid length. [ 768.386176][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.433707][ T881] bond5: (slave bridge3): Enslaving as a backup interface with an up link [ 768.452347][ T881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7757'. [ 768.472394][ T881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7757'. [ 768.545879][ T893] x_tables: duplicate entry at hook 3 [ 768.546616][ T895] x_tables: duplicate entry at hook 3 [ 768.566149][ T894] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7761'. [ 768.708870][ T893] netlink: 'syz.4.7762': attribute type 2 has an invalid length. [ 768.900742][ T916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7767'. [ 768.943869][ T915] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 769.096023][ T934] netlink: 'syz.0.7770': attribute type 1 has an invalid length. [ 769.335784][ T948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7771'. [ 769.404893][ T948] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 769.424233][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.511085][ T957] xt_TCPMSS: Only works on TCP SYN packets [ 769.607318][ T964] mac80211_hwsim hwsim69 wlan0: entered promiscuous mode [ 769.854560][ T977] veth1_macvtap: renamed from veth0_vlan [ 769.892811][ T980] tipc: Invalid UDP bearer configuration [ 769.892864][ T980] tipc: Enabling of bearer rejected, failed to enable media [ 769.910868][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 770.009987][ T993] netlink: 'syz.1.7785': attribute type 1 has an invalid length. [ 770.090017][ T1002] netlink: 'syz.2.7786': attribute type 2 has an invalid length. [ 770.170332][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.300496][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.323936][ T1012] syzkaller0: entered promiscuous mode [ 770.337562][ T1012] syzkaller0: entered allmulticast mode [ 770.374736][ T1022] __nla_validate_parse: 7 callbacks suppressed [ 770.374757][ T1022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7792'. [ 770.480706][ T1029] sock: sock_timestamping_bind_phc: sock not bind to device [ 770.502753][ T5833] block nbd9: Receive control failed (result -1) [ 770.516647][ T1036] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7792'. [ 770.539463][ T1036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7792'. [ 770.650623][ T1022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7792'. [ 770.705520][ T1022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7792'. [ 770.849180][ T1064] xt_l2tp: v2 tid > 0xffff: 1114244 [ 770.997705][ T1064] netlink: 'syz.1.7799': attribute type 1 has an invalid length. [ 771.168400][ T1064] 8021q: adding VLAN 0 to HW filter on device bond5 [ 771.337255][ T5490] veth1_macvtap: left promiscuous mode [ 771.375063][ T5490] veth1_macvtap: entered promiscuous mode [ 771.501476][ T5901] net_ratelimit: 10 callbacks suppressed [ 771.501494][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.629343][ T1101] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7806'. [ 771.831624][ T1119] openvswitch: netlink: EtherType 50a is less than min 600 [ 772.349367][ T1157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7819'. [ 772.540992][ T9528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.767842][ T1185] netlink: 'syz.0.7826': attribute type 1 has an invalid length. [ 772.854136][ T1185] bond10: entered promiscuous mode [ 772.861085][ T1185] 8021q: adding VLAN 0 to HW filter on device bond10 [ 772.921813][ T1190] macvtap2: entered allmulticast mode [ 772.927529][ T1190] veth0_macvtap: entered allmulticast mode [ 772.941590][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.950817][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.963004][T10454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.038372][ T1203] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7831'. [ 773.101052][ T1205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7833'. [ 773.129668][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 773.138047][ C0] lec:lec_tx_timeout: lec0 [ 773.142616][ T1205] netlink: 'syz.0.7833': attribute type 3 has an invalid length. [ 773.143191][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 773.206245][ T1215] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7836'. [ 773.298191][ T1222] openvswitch: netlink: IP tunnel dst address not specified [ 773.384925][ T1235] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 773.396578][ T1231] xt_hashlimit: size too large, truncated to 1048576 [ 773.420912][ T1231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.430338][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.590464][ T9528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.745735][ T1265] netlink: 'syz.1.7844': attribute type 1 has an invalid length. [ 773.848838][ T1265] bond6: entered promiscuous mode [ 773.910097][ T1265] 8021q: adding VLAN 0 to HW filter on device bond6 [ 773.973020][ T1273] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 773.989263][ T1273] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 774.006308][ T1273] bond6: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 774.201919][ T1282] syzkaller0: entered promiscuous mode [ 774.207528][ T1282] syzkaller0: entered allmulticast mode [ 774.342234][ T1305] netlink: 'syz.1.7855': attribute type 6 has an invalid length. [ 774.361249][ T1306] netlink: 'syz.1.7855': attribute type 6 has an invalid length. [ 774.405034][ T1310] netlink: 'syz.1.7855': attribute type 1 has an invalid length. [ 776.474871][ T1299] syzkaller0: entered promiscuous mode [ 776.480869][ T1299] syzkaller0: entered allmulticast mode [ 776.504447][ T1310] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 776.598065][ T1330] net_ratelimit: 3 callbacks suppressed [ 776.598087][ T1330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.622202][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.730340][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.852214][ T1346] ip6gretap0: entered allmulticast mode [ 776.965080][ T1352] __nla_validate_parse: 8 callbacks suppressed [ 776.965100][ T1352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7867'. [ 777.268927][ T1367] netlink: 'syz.4.7870': attribute type 21 has an invalid length. [ 777.420921][T10465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.686814][ T1388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7878'. [ 777.687116][ T1386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7879'. [ 777.715500][ T1381] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7880'. [ 777.726546][ T1388] netlink: 'syz.2.7878': attribute type 1 has an invalid length. [ 777.741533][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.767125][ T1388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7878'. [ 777.888619][ T1399] netlink: 'syz.1.7883': attribute type 7 has an invalid length. [ 777.898231][ T1399] netlink: 'syz.1.7883': attribute type 7 has an invalid length. [ 778.041384][ T1413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7886'. [ 778.088628][ T1415] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7888'. [ 778.110800][ T1413] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7886'. [ 778.147773][ T1420] nbd: couldn't find device at index 0 [ 778.166730][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 778.175124][ C0] lec:lec_tx_timeout: lec0 [ 778.180698][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 778.277003][ T1425] bond7 (unregistering): Released all slaves [ 778.339986][ T1442] netlink: 'syz.4.7893': attribute type 2 has an invalid length. [ 778.389318][ T1435] tipc: Enabling of bearer rejected, failed to enable media [ 778.446244][ T1442] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7893'. [ 778.493175][ T1441] netlink: 'syz.3.7894': attribute type 11 has an invalid length. [ 778.639810][ T1450] netlink: 'syz.1.7895': attribute type 1 has an invalid length. [ 778.686253][ T1450] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7895'. [ 778.785450][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.020538][T10454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.113016][ T1505] syzkaller1: entered promiscuous mode [ 779.119696][ T1505] syzkaller1: entered allmulticast mode [ 779.356276][ T1450] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 779.538870][ T1515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.547649][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.571308][ T1520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.588620][ T1524] xt_CT: You must specify a L4 protocol and not use inversions on it [ 780.157404][ T1569] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 780.170877][ T1571] netlink: 'syz.2.7925': attribute type 1 has an invalid length. [ 780.190817][ T1569] syzkaller1: Refused to change device type [ 780.206761][ T1574] xt_l2tp: missing protocol rule (udp|l2tpip) [ 780.251416][ T1561] xt_ecn: cannot match TCP bits for non-tcp packets [ 780.476388][ T1587] [ 780.478783][ T1587] ====================================================== [ 780.485880][ T1587] WARNING: possible circular locking dependency detected [ 780.492894][ T1587] syzkaller #0 Not tainted [ 780.497302][ T1587] ------------------------------------------------------ [ 780.504587][ T1587] syz.4.7930/1587 is trying to acquire lock: [ 780.510749][ T1587] ffff8880256ca398 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x300 [ 780.519675][ T1587] [ 780.519675][ T1587] but task is already holding lock: [ 780.527175][ T1587] ffff88802a528f28 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 780.536708][ T1587] [ 780.536708][ T1587] which lock already depends on the new lock. [ 780.536708][ T1587] [ 780.547353][ T1587] [ 780.547353][ T1587] the existing dependency chain (in reverse order) is: [ 780.556364][ T1587] [ 780.556364][ T1587] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 780.564210][ T1587] __mutex_lock+0x19f/0x1300 [ 780.569426][ T1587] elevator_change+0x1b3/0x450 [ 780.574803][ T1587] elevator_set_none+0xb5/0x140 [ 780.580413][ T1587] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 780.586830][ T1587] nbd_start_device+0x17f/0xb10 [ 780.592268][ T1587] nbd_genl_connect+0x165b/0x1cf0 [ 780.597813][ T1587] genl_family_rcv_msg_doit+0x22a/0x330 [ 780.603876][ T1587] genl_rcv_msg+0x61c/0x7a0 [ 780.608892][ T1587] netlink_rcv_skb+0x232/0x4b0 [ 780.614165][ T1587] genl_rcv+0x28/0x40 [ 780.618665][ T1587] netlink_unicast+0x80f/0x9b0 [ 780.624054][ T1587] netlink_sendmsg+0x813/0xb40 [ 780.629343][ T1587] ____sys_sendmsg+0x972/0x9f0 [ 780.634645][ T1587] ___sys_sendmsg+0x2a5/0x360 [ 780.639930][ T1587] __x64_sys_sendmsg+0x1bd/0x2a0 [ 780.645561][ T1587] do_syscall_64+0x14d/0xf80 [ 780.650706][ T1587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.657115][ T1587] [ 780.657115][ T1587] -> #5 (&q->q_usage_counter(io)#56){++++}-{0:0}: [ 780.665892][ T1587] blk_alloc_queue+0x546/0x680 [ 780.671379][ T1587] __blk_mq_alloc_disk+0x197/0x390 [ 780.677100][ T1587] nbd_dev_add+0x499/0xb50 [ 780.682163][ T1587] nbd_init+0x168/0x1f0 [ 780.686934][ T1587] do_one_initcall+0x250/0x8d0 [ 780.692299][ T1587] do_initcall_level+0x104/0x190 [ 780.697848][ T1587] do_initcalls+0x59/0xa0 [ 780.702776][ T1587] kernel_init_freeable+0x2a6/0x3e0 [ 780.708571][ T1587] kernel_init+0x1d/0x1d0 [ 780.713503][ T1587] ret_from_fork+0x51e/0xb90 [ 780.718695][ T1587] ret_from_fork_asm+0x1a/0x30 [ 780.724151][ T1587] [ 780.724151][ T1587] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 780.731539][ T1587] fs_reclaim_acquire+0x71/0x100 [ 780.736999][ T1587] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 780.743412][ T1587] __alloc_skb+0x1d0/0x7d0 [ 780.748431][ T1587] __ip6_append_data+0x2a44/0x3c50 [ 780.754156][ T1587] ip6_append_data+0x10f/0x280 [ 780.759698][ T1587] rawv6_sendmsg+0x12d3/0x18e0 [ 780.765063][ T1587] ____sys_sendmsg+0x80a/0x9f0 [ 780.770347][ T1587] ___sys_sendmsg+0x2a5/0x360 [ 780.775550][ T1587] __x64_sys_sendmsg+0x1bd/0x2a0 [ 780.781105][ T1587] do_syscall_64+0x14d/0xf80 [ 780.786245][ T1587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.792871][ T1587] [ 780.792871][ T1587] -> #3 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 780.800622][ T1587] lock_sock_nested+0x48/0x100 [ 780.806028][ T1587] inet_shutdown+0x6a/0x390 [ 780.811088][ T1587] nbd_mark_nsock_dead+0x2e9/0x560 [ 780.816906][ T1587] recv_work+0x1c7f/0x1d90 [ 780.822112][ T1587] process_scheduled_works+0xb6e/0x18c0 [ 780.828371][ T1587] worker_thread+0xa53/0xfc0 [ 780.833485][ T1587] kthread+0x388/0x470 [ 780.838082][ T1587] ret_from_fork+0x51e/0xb90 [ 780.843186][ T1587] ret_from_fork_asm+0x1a/0x30 [ 780.848504][ T1587] [ 780.848504][ T1587] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 780.856411][ T1587] __mutex_lock+0x19f/0x1300 [ 780.861697][ T1587] nbd_queue_rq+0x37b/0x1100 [ 780.866802][ T1587] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 780.872865][ T1587] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 780.879801][ T1587] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 780.886559][ T1587] blk_mq_run_hw_queue+0x348/0x4f0 [ 780.892476][ T1587] blk_mq_dispatch_list+0xd16/0xe10 [ 780.898417][ T1587] blk_mq_flush_plug_list+0x48d/0x570 [ 780.904395][ T1587] __blk_flush_plug+0x3ed/0x4d0 [ 780.909933][ T1587] __submit_bio+0x28d/0x580 [ 780.914977][ T1587] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 780.921304][ T1587] block_read_full_folio+0x599/0x830 [ 780.927112][ T1587] filemap_read_folio+0x137/0x3b0 [ 780.932734][ T1587] do_read_cache_folio+0x358/0x590 [ 780.938421][ T1587] read_part_sector+0xb6/0x2b0 [ 780.943703][ T1587] adfspart_check_ICS+0xa5/0xa40 [ 780.949334][ T1587] bdev_disk_changed+0x7ba/0x1550 [ 780.955221][ T1587] blkdev_get_whole+0x380/0x510 [ 780.960587][ T1587] bdev_open+0x31e/0xd30 [ 780.965339][ T1587] blkdev_open+0x470/0x610 [ 780.970414][ T1587] do_dentry_open+0x785/0x14e0 [ 780.975805][ T1587] vfs_open+0x3b/0x340 [ 780.980410][ T1587] path_openat+0x2e08/0x3860 [ 780.985614][ T1587] do_file_open+0x23e/0x4a0 [ 780.991150][ T1587] do_sys_openat2+0x113/0x200 [ 780.996427][ T1587] __x64_sys_openat+0x138/0x170 [ 781.001857][ T1587] do_syscall_64+0x14d/0xf80 [ 781.006965][ T1587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.013468][ T1587] [ 781.013468][ T1587] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 781.020787][ T1587] __mutex_lock+0x19f/0x1300 [ 781.025929][ T1587] nbd_queue_rq+0xc6/0x1100 [ 781.031136][ T1587] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 781.037531][ T1587] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 781.044589][ T1587] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 781.051187][ T1587] blk_mq_run_hw_queue+0x348/0x4f0 [ 781.056915][ T1587] blk_mq_dispatch_list+0xd16/0xe10 [ 781.063064][ T1587] blk_mq_flush_plug_list+0x48d/0x570 [ 781.069139][ T1587] __blk_flush_plug+0x3ed/0x4d0 [ 781.074604][ T1587] __submit_bio+0x28d/0x580 [ 781.079646][ T1587] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 781.086232][ T1587] block_read_full_folio+0x599/0x830 [ 781.092033][ T1587] filemap_read_folio+0x137/0x3b0 [ 781.097634][ T1587] do_read_cache_folio+0x358/0x590 [ 781.103537][ T1587] read_part_sector+0xb6/0x2b0 [ 781.108961][ T1587] adfspart_check_ICS+0xa5/0xa40 [ 781.114408][ T1587] bdev_disk_changed+0x7ba/0x1550 [ 781.119955][ T1587] blkdev_get_whole+0x380/0x510 [ 781.125515][ T1587] bdev_open+0x31e/0xd30 [ 781.130496][ T1587] blkdev_open+0x470/0x610 [ 781.135609][ T1587] do_dentry_open+0x785/0x14e0 [ 781.141100][ T1587] vfs_open+0x3b/0x340 [ 781.145858][ T1587] path_openat+0x2e08/0x3860 [ 781.151129][ T1587] do_file_open+0x23e/0x4a0 [ 781.156146][ T1587] do_sys_openat2+0x113/0x200 [ 781.161473][ T1587] __x64_sys_openat+0x138/0x170 [ 781.166842][ T1587] do_syscall_64+0x14d/0xf80 [ 781.172032][ T1587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.178606][ T1587] [ 781.178606][ T1587] -> #0 (set->srcu){.+.+}-{0:0}: [ 781.185719][ T1587] __lock_acquire+0x15a5/0x2cf0 [ 781.191085][ T1587] lock_sync+0x9d/0x120 [ 781.195758][ T1587] __synchronize_srcu+0xca/0x300 [ 781.201206][ T1587] elevator_switch+0x1e8/0x7a0 [ 781.206502][ T1587] elevator_change+0x2cc/0x450 [ 781.211776][ T1587] elevator_set_default+0x36c/0x430 [ 781.217604][ T1587] blk_register_queue+0x366/0x430 [ 781.223269][ T1587] __add_disk+0x677/0xd50 [ 781.228137][ T1587] add_disk_fwnode+0xfb/0x480 [ 781.233435][ T1587] nbd_dev_add+0x72c/0xb50 [ 781.238885][ T1587] nbd_genl_connect+0x962/0x1cf0 [ 781.244507][ T1587] genl_family_rcv_msg_doit+0x22a/0x330 [ 781.250654][ T1587] genl_rcv_msg+0x61c/0x7a0 [ 781.255759][ T1587] netlink_rcv_skb+0x232/0x4b0 [ 781.261041][ T1587] genl_rcv+0x28/0x40 [ 781.265710][ T1587] netlink_unicast+0x80f/0x9b0 [ 781.271160][ T1587] netlink_sendmsg+0x813/0xb40 [ 781.276618][ T1587] ____sys_sendmsg+0x972/0x9f0 [ 781.282037][ T1587] ___sys_sendmsg+0x2a5/0x360 [ 781.287317][ T1587] __x64_sys_sendmsg+0x1bd/0x2a0 [ 781.292860][ T1587] do_syscall_64+0x14d/0xf80 [ 781.298146][ T1587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.304645][ T1587] [ 781.304645][ T1587] other info that might help us debug this: [ 781.304645][ T1587] [ 781.315126][ T1587] Chain exists of: [ 781.315126][ T1587] set->srcu --> &q->q_usage_counter(io)#56 --> &q->elevator_lock [ 781.315126][ T1587] [ 781.329470][ T1587] Possible unsafe locking scenario: [ 781.329470][ T1587] [ 781.337002][ T1587] CPU0 CPU1 [ 781.342362][ T1587] ---- ---- [ 781.347800][ T1587] lock(&q->elevator_lock); [ 781.352504][ T1587] lock(&q->q_usage_counter(io)#56); [ 781.360741][ T1587] lock(&q->elevator_lock); [ 781.367932][ T1587] sync(set->srcu); [ 781.372528][ T1587] [ 781.372528][ T1587] *** DEADLOCK *** [ 781.372528][ T1587] [ 781.381020][ T1587] 6 locks held by syz.4.7930/1587: [ 781.386135][ T1587] #0: ffffffff8fc3ee70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 781.394516][ T1587] #1: ffffffff8fc3ec88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 781.403493][ T1587] #2: ffff8880667189d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x480 [ 781.414210][ T1587] #3: ffff88802a528fb8 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x115/0x430 [ 781.424053][ T1587] #4: ffff88802a528a20 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 781.435638][ T1587] #5: ffff88802a528f28 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 781.445586][ T1587] [ 781.445586][ T1587] stack backtrace: [ 781.451470][ T1587] CPU: 0 UID: 0 PID: 1587 Comm: syz.4.7930 Not tainted syzkaller #0 PREEMPT(full) [ 781.451490][ T1587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 781.451501][ T1587] Call Trace: [ 781.451509][ T1587] [ 781.451518][ T1587] dump_stack_lvl+0xe8/0x150 [ 781.451543][ T1587] print_circular_bug+0x2e1/0x300 [ 781.451570][ T1587] check_noncircular+0x12e/0x150 [ 781.451595][ T1587] __lock_acquire+0x15a5/0x2cf0 [ 781.451616][ T1587] ? check_path+0x21/0x40 [ 781.451640][ T1587] ? lockdep_unlock+0x5d/0xd0 [ 781.451656][ T1587] ? __lock_acquire+0x146e/0x2cf0 [ 781.451677][ T1587] ? __synchronize_srcu+0xb6/0x300 [ 781.451695][ T1587] lock_sync+0x9d/0x120 [ 781.451714][ T1587] ? __synchronize_srcu+0xb6/0x300 [ 781.451734][ T1587] __synchronize_srcu+0xca/0x300 [ 781.451752][ T1587] ? do_raw_spin_lock+0x12b/0x2f0 [ 781.451768][ T1587] ? __pfx___synchronize_srcu+0x10/0x10 [ 781.451790][ T1587] ? read_tsc+0x9/0x20 [ 781.451806][ T1587] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 781.451823][ T1587] ? synchronize_srcu+0x20d/0x270 [ 781.451842][ T1587] elevator_switch+0x1e8/0x7a0 [ 781.451861][ T1587] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 781.451884][ T1587] elevator_change+0x2cc/0x450 [ 781.451903][ T1587] ? do_raw_spin_unlock+0xf5/0x210 [ 781.451919][ T1587] elevator_set_default+0x36c/0x430 [ 781.451939][ T1587] ? __pfx_elevator_set_default+0x10/0x10 [ 781.451962][ T1587] ? disk_register_independent_access_ranges+0x2db/0x380 [ 781.451980][ T1587] ? blk_crypto_sysfs_register+0x11c/0x170 [ 781.451998][ T1587] blk_register_queue+0x366/0x430 [ 781.452022][ T1587] __add_disk+0x677/0xd50 [ 781.452045][ T1587] ? down_read+0x272/0x2e0 [ 781.452061][ T1587] add_disk_fwnode+0xfb/0x480 [ 781.452085][ T1587] nbd_dev_add+0x72c/0xb50 [ 781.452106][ T1587] ? __pfx_nbd_dev_add+0x10/0x10 [ 781.452131][ T1587] ? bpf_lsm_capable+0x9/0x20 [ 781.452152][ T1587] ? security_capable+0x7e/0x2c0 [ 781.452176][ T1587] ? radix_tree_lookup+0x240/0x290 [ 781.452195][ T1587] nbd_genl_connect+0x962/0x1cf0 [ 781.452218][ T1587] ? __pfx_nbd_genl_connect+0x10/0x10 [ 781.452238][ T1587] ? rcu_is_watching+0x15/0xb0 [ 781.452258][ T1587] ? trace_kmalloc+0x2a/0x110 [ 781.452277][ T1587] ? __nla_parse+0x40/0x60 [ 781.452295][ T1587] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 781.452321][ T1587] genl_family_rcv_msg_doit+0x22a/0x330 [ 781.452344][ T1587] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 781.452371][ T1587] ? __lock_acquire+0x6b5/0x2cf0 [ 781.452392][ T1587] genl_rcv_msg+0x61c/0x7a0 [ 781.452414][ T1587] ? __pfx_genl_rcv_msg+0x10/0x10 [ 781.452439][ T1587] ? __pfx_nbd_genl_connect+0x10/0x10 [ 781.452457][ T1587] ? __lock_acquire+0x6b5/0x2cf0 [ 781.452480][ T1587] netlink_rcv_skb+0x232/0x4b0 [ 781.452497][ T1587] ? __pfx_genl_rcv_msg+0x10/0x10 [ 781.452517][ T1587] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 781.452539][ T1587] ? down_read+0x272/0x2e0 [ 781.452552][ T1587] ? genl_rcv+0xd/0x40 [ 781.452572][ T1587] genl_rcv+0x28/0x40 [ 781.452591][ T1587] netlink_unicast+0x80f/0x9b0 [ 781.452608][ T1587] ? __pfx_netlink_unicast+0x10/0x10 [ 781.452623][ T1587] ? netlink_sendmsg+0x650/0xb40 [ 781.452639][ T1587] ? skb_put+0x11b/0x210 [ 781.452659][ T1587] netlink_sendmsg+0x813/0xb40 [ 781.452679][ T1587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 781.452697][ T1587] ? aa_sock_msg_perm+0xf1/0x1b0 [ 781.452721][ T1587] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 781.452740][ T1587] ____sys_sendmsg+0x972/0x9f0 [ 781.452760][ T1587] ? futex_unqueue+0x211/0x240 [ 781.452779][ T1587] ? __pfx_____sys_sendmsg+0x10/0x10 [ 781.452802][ T1587] ? import_iovec+0x73/0xa0 [ 781.452821][ T1587] ___sys_sendmsg+0x2a5/0x360 [ 781.452843][ T1587] ? __pfx____sys_sendmsg+0x10/0x10 [ 781.452869][ T1587] ? futex_wait+0x29a/0x380 [ 781.452899][ T1587] ? __fget_files+0x2a/0x420 [ 781.452913][ T1587] ? __fget_files+0x3a0/0x420 [ 781.452929][ T1587] __x64_sys_sendmsg+0x1bd/0x2a0 [ 781.452956][ T1587] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 781.452979][ T1587] ? rcu_is_watching+0x15/0xb0 [ 781.453004][ T1587] do_syscall_64+0x14d/0xf80 [ 781.453025][ T1587] ? trace_irq_disable+0x3b/0x150 [ 781.453045][ T1587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.453061][ T1587] ? clear_bhb_loop+0x40/0x90 [ 781.453082][ T1587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.453108][ T1587] RIP: 0033:0x7fc8ac79c819 [ 781.453124][ T1587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.453139][ T1587] RSP: 002b:00007fc8ad64b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 781.453157][ T1587] RAX: ffffffffffffffda RBX: 00007fc8aca15fa0 RCX: 00007fc8ac79c819 [ 781.453169][ T1587] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000005 [ 781.453181][ T1587] RBP: 00007fc8ac832c91 R08: 0000000000000000 R09: 0000000000000000 [ 781.453191][ T1587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 781.453201][ T1587] R13: 00007fc8aca16038 R14: 00007fc8aca15fa0 R15: 00007ffe81f9a088 [ 781.453218][ T1587] [ 781.971158][ T1597] __nla_validate_parse: 4 callbacks suppressed [ 781.971179][ T1597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7933'. [ 782.061267][T10470] net_ratelimit: 3 callbacks suppressed [ 782.061284][T10470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.100102][ T1587] nbd4: detected capacity change from 0 to 63 [ 782.106685][ T1596] block nbd4: NBD_DISCONNECT [ 782.112317][ T1596] block nbd4: Disconnected due to user request. [ 782.118578][ T1596] block nbd4: shutting down sockets [ 782.129899][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 782.139473][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 782.139783][ C0] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 782.149728][ C1] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 782.156971][ C0] Buffer I/O error on dev nbd4, logical block 1, async page read [ 782.166485][ C1] Buffer I/O error on dev nbd4, logical block 2, async page read [ 782.166565][ C1] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 782.191587][ C1] Buffer I/O error on dev nbd4, logical block 3, async page read [ 782.199951][T26554] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 782.209974][T26554] Buffer I/O error on dev nbd4, logical block 0, async page read [ 782.218271][T26554] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 782.227996][T26554] Buffer I/O error on dev nbd4, logical block 1, async page read [ 782.236299][T26554] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 782.246253][T26554] Buffer I/O error on dev nbd4, logical block 2, async page read [ 782.254391][T26554] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 782.265898][T26554] Buffer I/O error on dev nbd4, logical block 3, async page read [ 782.273849][T26554] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 782.283657][T26554] Buffer I/O error on dev nbd4, logical block 0, async page read [ 782.292456][T26554] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 782.303356][T26554] Buffer I/O error on dev nbd4, logical block 1, async page read [ 782.312152][T26554] ldm_validate_partition_table(): Disk read failed. [ 782.318978][T26554] Dev nbd4: unable to read RDB block 0 [ 782.326566][T26554] nbd4: unable to read partition table [ 782.335264][T26554] ldm_validate_partition_table(): Disk read failed. [ 782.342725][T26554] Dev nbd4: unable to read RDB block 0 [ 782.348719][T26554] nbd4: unable to read partition table [ 782.470393][ T9528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.181500][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.189918][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 783.198324][ C0] lec:lec_tx_timeout: lec0 [ 783.202856][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 783.500170][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.540830][ T9528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.580730][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.220715][T10454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.390342][ T31] INFO: task udevd:19648 blocked for more than 143 seconds. [ 786.398051][ T31] Not tainted syzkaller #0 [ 786.403539][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 786.412499][ T31] task:udevd state:D stack:22296 pid:19648 tgid:19648 ppid:5195 task_flags:0x400140 flags:0x00080802 [ 786.424712][ T31] Call Trace: [ 786.428277][ T31] [ 786.431610][ T31] __schedule+0x15dd/0x52d0 [ 786.436253][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 786.441326][ T31] ? __pfx___schedule+0x10/0x10 [ 786.446189][ T31] ? schedule+0x90/0x360 [ 786.450788][ T31] schedule+0x164/0x360 [ 786.454972][ T31] io_schedule+0x7f/0xd0 [ 786.459254][ T31] folio_wait_bit_common+0x6d8/0xbc0 [ 786.464987][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 786.471012][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 786.476957][ T31] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 786.482878][ T31] do_read_cache_folio+0x1ad/0x590 [ 786.488080][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 786.494197][ T31] read_part_sector+0xb6/0x2b0 [ 786.498983][ T31] adfspart_check_POWERTEC+0x92/0xef0 [ 786.504721][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 786.510473][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 786.516752][ T31] bdev_disk_changed+0x7ba/0x1550 [ 786.522317][ T31] ? bdev_open+0xe0/0xd30 [ 786.526682][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 786.532337][ T31] blkdev_get_whole+0x380/0x510 [ 786.537213][ T31] bdev_open+0x31e/0xd30 [ 786.541737][ T31] blkdev_open+0x470/0x610 [ 786.546200][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 786.551411][ T31] do_dentry_open+0x785/0x14e0 [ 786.556197][ T31] vfs_open+0x3b/0x340 [ 786.560436][ T31] ? path_openat+0x2df0/0x3860 [ 786.565281][ T31] path_openat+0x2e08/0x3860 [ 786.570048][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 786.575610][ T31] ? stack_depot_save_flags+0x33/0x810 [ 786.581484][ T31] ? __pfx_path_openat+0x10/0x10 [ 786.586430][ T31] ? __x64_sys_openat+0x138/0x170 [ 786.591553][ T31] ? do_syscall_64+0x14d/0xf80 [ 786.596330][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.602554][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 786.607630][ T31] do_file_open+0x23e/0x4a0 [ 786.612606][ T31] ? __pfx_do_file_open+0x10/0x10 [ 786.617911][ T31] ? _raw_spin_unlock+0x28/0x50 [ 786.622996][ T31] ? alloc_fd+0x64b/0x6c0 [ 786.627439][ T31] do_sys_openat2+0x113/0x200 [ 786.632327][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 786.632360][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.637809][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 786.637848][ T31] ? rcu_is_watching+0x15/0xb0 [ 786.656463][ T31] __x64_sys_openat+0x138/0x170 [ 786.661563][ T31] do_syscall_64+0x14d/0xf80 [ 786.666257][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.672630][ T31] ? clear_bhb_loop+0x40/0x90 [ 786.677519][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.683478][ T31] RIP: 0033:0x7f56d8fe0407 [ 786.687930][ T31] RSP: 002b:00007ffd52ad75c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 786.696899][ T31] RAX: ffffffffffffffda RBX: 00007f56d8f54880 RCX: 00007f56d8fe0407 [ 786.705229][ T31] RDX: 00000000000a0800 RSI: 000055e98eb6c0f0 RDI: ffffffffffffff9c [ 786.713428][ T31] RBP: 000055e98eb54910 R08: 0000000000000000 R09: 0000000000000000 [ 786.721473][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055e98eb67e20 [ 786.730138][ T31] R13: 000055e98eb62190 R14: 0000000000000000 R15: 000055e98eb67e20 [ 786.738423][ T31] [ 786.741567][ T31] INFO: lockdep is turned off. [ 786.746431][ T31] NMI backtrace for cpu 0 [ 786.746444][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 786.746457][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 786.746464][ T31] Call Trace: [ 786.746470][ T31] [ 786.746477][ T31] dump_stack_lvl+0xe8/0x150 [ 786.746507][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 786.746528][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 786.746546][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 786.746558][ T31] sys_info+0x135/0x170 [ 786.746568][ T31] watchdog+0xfd9/0x1030 [ 786.746579][ T31] ? watchdog+0x21a/0x1030 [ 786.746589][ T31] kthread+0x388/0x470 [ 786.746599][ T31] ? __pfx_watchdog+0x10/0x10 [ 786.746607][ T31] ? __pfx_kthread+0x10/0x10 [ 786.746616][ T31] ret_from_fork+0x51e/0xb90 [ 786.746631][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 786.746643][ T31] ? __switch_to+0xc7d/0x1450 [ 786.746655][ T31] ? __pfx_kthread+0x10/0x10 [ 786.746665][ T31] ret_from_fork_asm+0x1a/0x30 [ 786.746682][ T31] [ 786.746687][ T31] Sending NMI from CPU 0 to CPUs 1: [ 786.859407][ C1] NMI backtrace for cpu 1 [ 786.859427][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 786.859445][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 786.859455][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 786.859482][ C1] Code: 5e 6b 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 62 19 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 786.859496][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 786.859511][ C1] RAX: ffff888125551000 RBX: ffffffff819a9d1a RCX: 0000000080000001 [ 786.859523][ C1] RDX: 0000000000000001 RSI: ffffffff8c27d560 RDI: ffffffff819a9d1a [ 786.859534][ C1] RBP: ffffc90000197f10 R08: ffff8880b873399b R09: 1ffff110170e6733 [ 786.859549][ C1] R10: dffffc0000000000 R11: ffffed10170e6734 R12: 0000000000000001 [ 786.859559][ C1] R13: 1ffff11003bd0000 R14: 0000000000000001 R15: 1ffff11003bd0000 [ 786.859569][ C1] FS: 0000000000000000(0000) GS:ffff888125551000(0000) knlGS:0000000000000000 [ 786.859582][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 786.859593][ C1] CR2: 00007f428e07a6b0 CR3: 0000000032c40000 CR4: 00000000003526f0 [ 786.859607][ C1] Call Trace: [ 786.859614][ C1] [ 786.859620][ C1] default_idle+0x9/0x20 [ 786.859635][ C1] default_idle_call+0x72/0xb0 [ 786.859652][ C1] do_idle+0x36a/0x5f0 [ 786.859672][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 786.859692][ C1] ? __pfx_do_idle+0x10/0x10 [ 786.859713][ C1] cpu_startup_entry+0x43/0x60 [ 786.859732][ C1] start_secondary+0x101/0x110 [ 786.859750][ C1] common_startup_64+0x13e/0x147 [ 786.859772][ C1] [ 786.860454][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 786.860474][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 786.860494][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 786.860505][ T31] Call Trace: [ 786.860512][ T31] [ 786.860519][ T31] vpanic+0x56c/0xa60 [ 786.860545][ T31] ? __pfx___schedule+0x10/0x10 [ 786.860567][ T31] ? __pfx_vpanic+0x10/0x10 [ 786.860593][ T31] panic+0xc5/0xd0 [ 786.860614][ T31] ? __pfx_panic+0x10/0x10 [ 786.860636][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 786.860658][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 786.860680][ T31] watchdog+0x1023/0x1030 [ 786.860699][ T31] ? watchdog+0x21a/0x1030 [ 786.860718][ T31] kthread+0x388/0x470 [ 786.860734][ T31] ? __pfx_watchdog+0x10/0x10 [ 786.860750][ T31] ? __pfx_kthread+0x10/0x10 [ 786.860767][ T31] ret_from_fork+0x51e/0xb90 [ 786.860791][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 786.860811][ T31] ? __switch_to+0xc7d/0x1450 [ 786.860838][ T31] ? __pfx_kthread+0x10/0x10 [ 786.860856][ T31] ret_from_fork_asm+0x1a/0x30 [ 786.860887][ T31] [ 787.145026][ T31] Kernel Offset: disabled [ 787.149568][ T31] Rebooting in 86400 seconds..